Environmental monitoring device

ABSTRACT

An environmental monitoring device that monitors the operation of a legacy electronic device is described. In particular, a sensor in the environmental monitoring device provides sensor data that represents an environmental condition in an external environment that includes the environmental monitoring device. This environmental condition is associated with the operation of the legacy electronic device in the external environment. The environmental monitoring device analyzes the sensor data and provides feedback about the operation of the legacy electronic device based on the analyzed sensor data. Moreover, the sensor provides the sensor data without or excluding communication and/or electrical coupling between the environmental monitoring device and the legacy electronic device. In this way, the environmental monitoring device facilitates monitoring, analysis and feedback of the sensor data without directly interacting with the legacy electronic device.

CROSS REFERENCE TO RELATED APPLICATION

This application is a continuation of PCT Application No.PCT/US14/25742, filed 13 Mar. 2014, which claims priority under 35U.S.C. §119(e) to U.S. Provisional Application Ser. No. 61/802,310,filed on Mar. 15, 2013, both of which are herein incorporated byreference in their entireties.

BACKGROUND

1. Field

The described embodiments relate generally to environmental monitoringdevices, and more specifically to techniques for providing feedback onthe operation of electronic devices in an environment and generating ahistorical record.

2. Related Art

Trends in connectivity and in portable electronic devices are resultingin dramatic changes in people's lives. For example, the Internet nowallows individuals access to vast amounts of information, as well as theability to identify and interact with individuals, organizations andcompanies around the world. This has resulted in a significant increasein online financial transactions (which are sometimes referred to as‘ecommerce’). Similarly, the increasingly powerful computing andcommunication capabilities of portable electronic device (such assmartphones), as well as a large and growing set of applications, areaccelerating these changes, providing individuals access to informationat arbitrary locations and the ability to leverage this information toperform a wide variety of tasks.

Recently, it has been proposed these capabilities be included in otherelectronic devices that are located throughout our environments,including those that people interact with infrequently. In the so-called‘Internet of things,’ it has been proposed that future versions of theseso-called ‘background’ electronic devices be outfitted with morepowerful computing capabilities and networking subsystems to facilitatewired or wireless communication. For example, the background electronicdevices may include: a cellular network interface (LTE, etc.), awireless local area network interface (e.g., a wireless network such asdescribed in the Institute of Electrical and Electronics Engineers(IEEE) 802.11 standard or Bluetooth™ from the Bluetooth SpecialInterests Group of Kirkland, Wash.), and/or another type of wirelessinterface (such as a near-field-communication interface). Thesecapabilities may allow the background electronic devices to beintegrated into information networks, thereby further transformingpeople's lives.

However, the overwhelming majority of the existing background electronicdevices in people's homes, offices and vehicles have neither enhancedcomputing capabilities (such as processor that can execute a widevariety of applications) nor networking subsystems. Given the economicsof many market segments (such as the consumer market segment), theseso-called ‘legacy’ background electronic devices (which are sometimesreferred to as ‘legacy electronic devices’) are unlikely to be rapidlyreplaced. These barriers to entry and change are obstacles to widelyimplementing the Internet of things.

In addition, there remain many environments (such as the interiors oftrucks, trains, boxes, etc.) that currently do not regularly includeelectronic devices. As a consequence, it may also be difficult to extendthe advantages of connectivity and enhanced computing capabilities intothese environments.

Hence, there is a need for an environmental monitoring device thataddresses the above-described problems.

SUMMARY

One group of described embodiments relates to an environmentalmonitoring device, which includes a sensor that provides sensor data foran external environment that includes the environmental monitoringdevice. The sensor data represents an environmental condition that isassociated with operation of a legacy electronic device in the externalenvironment. Moreover, the environmental monitoring device analyzes thesensor data and provides feedback about the operation of the legacyelectronic device based on the analyzed sensor data. Furthermore, thesensor provides the sensor data without or excluding communicationand/or electrical coupling between the environmental monitoring deviceand the legacy electronic device.

In some embodiments, the environmental monitoring device includes aprocessor and a memory, which stores a program module that is executedby the processor. The program module includes instructions for:receiving the sensor data, the analyzing, and the providing.

Additionally, the environmental monitoring device may include anantenna, and an interface circuit that communicates with an aggregationelectronic device that is other than the legacy electronic device, wherethe providing involves communicating the feedback to the aggregationelectronic device via the interface circuit and the antenna.

Note that the sensor data may include: a particle count, a particlesize, a concentration of a chemical, a composition of the chemical,temperature, humidity, acoustic information, video, thermal information,vibration information, acceleration information, motion information,microanalysis information, mass-spectrometry information, and/orchemical-analysis information.

Moreover, the environmental condition may include: presence of anindividual, presence of a chemical compound, presence of an allergen,presence of dust, presence of a fungus, a fire, presence of smoke,flooding, a water leak, a chemical leak, presence of an insect, presenceof a rodent, availability of electrical power, a lighting condition,temperature deviating from a predefined target, and/or humiditydeviating from a predefined target.

Furthermore, the legacy electronic device may include: a smoke detector,a thermostat, a carbon-monoxide detector, an appliance, a clock, asecurity alarm, a humidifier, an air filter, a switch, and/or a light.

In some embodiments, the environmental monitoring device includes aphysiological output device (such as a speaker or a display) thatprovides sensory information, where the feedback is provided via thephysiological output device.

Another embodiment provides a computer-program product for use inconjunction with the environmental monitoring device. Thiscomputer-program product may include instructions for at least some ofthe aforementioned operations performed by the environmental monitoringdevice.

Another embodiment provides a method for providing feedback, which maybe performed by the processor in the environmental monitoring device.During operation, the processor receives the sensor data associated withthe sensor in the environmental monitoring device, where the sensor datais for the external environment that includes the environmentalmonitoring device. The sensor data represents the environmentalcondition that is associated with operation of a legacy electronicdevice in the external environment, and the legacy electronic device isseparate from the environmental monitoring device. Then, the processoranalyzes the sensor data. Next, the processor provides the feedbackabout the operation of the legacy electronic device based on theanalyzed sensor data.

Another embodiment provides a system that includes the environmentalmonitoring device and the legacy electronic device.

A second group of described embodiments relates to an electronic devicethat includes an antenna, and an interface circuit that communicateswith a set of electronic devices, where the set of electronic devices atleast includes other electronic devices than the electronic device, andthe set of electronic devices are located in separate environments.Moreover, the electronic device includes a processor and a memory, whichstores a program module that is executed by the processor. The programmodule includes instructions for: receiving sensor data from the set ofelectronic devices, where the sensor data represents environmentalconditions in the environments; analyzing the sensor data, where theanalysis involves comparing the sensor data from a given electronicdevice in the set of electronic devices with the sensor data from aremainder of the set of electronic devices; and determining a riskmetric for an environment associated with the given electronic devicebased on the analyzed sensor data.

Note that the environment may be included in a physical object or thephysical object may be included in the environment, and the programmodule may include instructions for calculating a financial valueassociated with the physical object based on the determined risk metric.For example, the financial value may include: a commercial value of thephysical object; and/or an insurance premium for the physical object. Inaddition, the physical object may include: a portion of a building, thebuilding, a container, a vehicle, a liquid, and/or a train car.

In some embodiments, the electronic device includes a sensor whichprovides sensor data that represents an environmental condition in anenvironment that includes the electronic device. Moreover, the programmodule may include instructions for accessing the sensor data from thesensor in the electronic device, and the analysis may include the sensordata from the sensor in the electronic device.

Furthermore, the environments may be associated with different entities.

Another embodiment provides a computer-program product for use inconjunction with the electronic device. This computer-program productmay include instructions for at least some of the aforementionedoperations performed by the electronic device.

Another embodiment provides a method for determining a risk metric,which may be performed by the processor in the electronic device. Duringoperation, the processor receives the sensor data from the set ofelectronic devices, where the sensor data represents the environmentalconditions in the external environments of the set of electronicdevices, and where the set of electronic devices at least includes theelectronic devices other than the electronic device. Then, the processoranalyzes the sensor data, where the analysis involves comparing thesensor data from the given electronic device in the set of electronicdevices with the sensor data from the remainder of the set of electronicdevices. Next, the processor determines the risk metric for the externalenvironment associated with the given electronic device based on theanalyzed sensor data.

Another embodiment provides a system that includes the electronic deviceand the set of electronic devices.

A third group of described embodiments relates to an environmentalmonitoring device, which includes a sensor that provides sensor datathat represents an environmental condition in an external environmentthat includes the environmental monitoring device. Moreover, theenvironmental monitoring device includes an antenna, and an interfacecircuit that communicates with an archive device. Furthermore, theenvironmental monitoring device includes a processor, where theprocessor includes a secure channel that processes information andcommunicates the processed information using an encryption keyassociated with the secure channel. Additionally, the environmentalmonitoring device includes a memory, which stores a program module thatis executed by the processor. The program module includes instructionsfor: receiving the sensor data from the sensor; generating a digitalsignature associated with the secure channel; and providing, to thearchive device, a certified data package for archiving in a historicalrecord for the external environment, where the certified data packageincludes the sensor data, the digital signature and a time stamp.

Note that the digital signature may be generated using: a secure hash ofthe time stamp and an identifier of the environmental monitoring device;and/or the encryption key.

In some embodiments, the program module includes instructions foranalyzing the sensor data, and the certified data package includes theanalyzed sensor data. For example, the external environment may beassociated with a physical object, and analyzing the sensor data mayinvolve calculating a risk metric for the external environment. Inaddition, the program module may include instructions for calculating afinancial value associated with the physical object based on thedetermined risk metric. This financial value may include: a commercialvalue of the physical object; and/or an insurance premium for thephysical object.

Furthermore, the environmental monitoring device may include a locationmonitor that provides information specifying a location of theenvironmental monitoring device in the external environment. In theseembodiments, the program module includes instructions for receiving theinformation specifying the location, and the certified data packageincludes the information specifying the location.

Alternatively or additionally, the program module may includeinstructions for receiving the information specifying the location ofthe environmental monitoring device in the external environment based oncommunication, via the interface circuit and the antenna, with anotherelectronic device, and the certified data package may include theinformation specifying the location. For example, the other electronicdevice (such as a cellular telephone, tablet computer or computer) maybe in the external environment and may be proximate to the environmentalmonitoring device.

Another embodiment provides a computer-program product for use inconjunction with the environmental monitoring device. Thiscomputer-program product may include instructions for at least some ofthe aforementioned operations performed by the environmental monitoringdevice.

Another embodiment provides a method for providing a certified datapackage, which may be performed by a secure channel in the processor inthe environmental monitoring device. During operation, the processorreceives the sensor data from the sensor in the environmental monitoringdevice, where the sensor data represents the environmental condition inthe external environment that includes the environmental monitoringdevice. Then, the processor generates the digital signature associatedwith the secure channel, where the secure channel processes informationand communicates the processed information using the encryption keyassociated with the secure channel. Next, the processor provides, to thearchive device, the certified data package for archiving in thehistorical record for the external environment, where the certified datapackage includes the sensor data, the digital signature and the timestamp.

Another embodiment provides a system that includes the environmentalmonitoring device and the archive device.

A fourth group of described embodiments relates to an electronic device,which includes a sensor that provides sensor data that represents anenvironmental condition in an external environment that includes theelectronic device. This electronic device receives informationspecifying a medical condition of an individual. Then, the electronicdevice determines a target value of the environmental condition based onthe information specifying the medical condition. Moreover, theelectronic device calculates a deviation from the target value based onthe sensor data and the target value. If a magnitude of the deviationexceeds a threshold, the electronic device modifies an operatingcondition of a regulator device in the external environment thatregulates the environmental condition. Next, the electronic deviceprovides the modified operating condition.

In some embodiments, the electronic device includes a processor, and amemory that stores a program module which is executed by the processor.The program module includes instructions for: the receiving, thedetermining, the calculating, and the modifying.

Moreover, the electronic device may include an antenna, and an interfacecircuit that communicates with another electronic device. The electronicdevice may receive: the information specifying the medical conditionfrom the other electronic device; and/or a forecast for theenvironmental condition from the other electronic device. In the laterembodiments, the electronic device may modify the operating conditionbased on the forecast.

Note that the medical condition may include: an allergy, a chemicalsensitivity, an illness, and/or a chronic disease that is affected bythe environmental condition. Furthermore, the regulator device mayinclude: a thermostat, a humidifier, an air purifier, a ventilatordevice, and/or an access-control device for the external environment.

Additionally, the target value may be based on a time of day and/or aseason (or time of year).

In some embodiments, the information specifying the medical conditionis: encrypted and/or de-identified so that the identity of theindividual is protected.

Moreover, the sensor data may include: a particle count, a particlesize, a concentration of a chemical, a composition of the chemical,temperature, humidity, acoustic information, video, thermal information,vibration information, acceleration information, motion information,microanalysis information, mass-spectrometry information, and/orchemical-analysis information.

Another embodiment provides a computer-program product for use inconjunction with the electronic device. This computer-program productmay include instructions for at least some of the aforementionedoperations performed by the electronic device.

Another embodiment provides a method for modifying the operatingcondition, which may be performed by the processor in the electronicdevice. During operation, the processor receives the informationspecifying the medical condition of the individual. Then, the processordetermines the target value of the environmental condition in theexternal environment of the electronic device based on the informationspecifying the medical condition. Moreover, the processor calculates thedeviation from the target value based on sensor data and the targetvalue, where the sensor data is provided by the sensor in the electronicdevice, and the sensor data represents the environmental condition.Next, the electronic device modifies the operating condition of theregulator device in the external environment if the deviation exceedsthe threshold, wherein the regulator device regulates the environmentalcondition. Furthermore, the processor provides the modified operatingcondition.

Another embodiment provides a system that includes the electronicdevice, the regulator device and/or other electronic device.

A fifth group of described embodiments relates to an environmentalmonitoring device, which includes a sensor that provides sensor datathat represents an environmental condition in an external environmentthat includes the environmental monitoring device. Moreover, theenvironmental monitoring device includes an antenna, and an interfacecircuit that communicates with an archive device and another electronicdevice. Furthermore, the environmental monitoring device includes aprocessor, and a memory that stores a program module which is executedby the processor. The program module includes instructions for:receiving the sensor data from the sensor; protecting the sensor data;providing the protected sensor data to the archive device; receiving arequest for the sensor data from the other electronic device; andproviding authorization information to the archive device to release thesensor data to the other electronic device.

Note that the authorization information may be based on a predefinedauthorization preference of a user associated with the environmentalmonitoring device.

In some embodiments, the program module includes instructions forrequesting user feedback about the request; and receiving the userfeedback, where the authorization information is provided if the userfeedback includes approval of the request.

Moreover, protecting the sensor data may involve hashing, using a securehash function, the sensor data, a random number generated by theenvironmental monitoring device and an identifier of the environmentalmonitoring device. Furthermore, the memory may store a set of securehash functions that includes the secure hash function, and the securehash function may be specified by a protection preference. The programmodule may include instructions for receiving the protection preferencefrom the archive device.

Additionally, the program module may include instructions for:communicating, to the archive device, information specifying how tounprotect the sensor data; and/or communicating, to the other electronicdevice, information specifying how to unprotect the sensor data.

In some embodiments, the request includes an address of the otherelectronic device, and the authorization information includes theaddress.

Another embodiment provides a computer-program product for use inconjunction with the environmental monitoring device. Thiscomputer-program product may include instructions for at least some ofthe aforementioned operations performed by the environmental monitoringdevice.

Another embodiment provides a method for authorizing access to sensordata, which may be performed by the processor in the environmentalmonitoring device. During operation, the processor receives the sensordata from the sensor in the environmental monitoring device, where thesensor data represents the environmental condition in the externalenvironment that includes the environmental monitoring device. Then, theprocessor protects the sensor data. Moreover, the processor provides theprotected sensor data to the archive device. Next, the processorreceives the request for the sensor data from the other electronicdevice. Furthermore, the processor provides the authorizationinformation to the archive device to release the sensor data to theother electronic device.

Another embodiment provides a system that includes the environmentalmonitoring device, the archive device and/or other electronic device.

A sixth group of described embodiments relates to an environmentalmonitoring device, which includes a sensor that provides sensor data foran external environment that includes the environmental monitoringdevice, where the sensor data represents an environmental condition thatis associated with operation of an electronic device in the externalenvironment. This environmental monitoring device analyzes the sensordata and provides a maintenance notification related to the operation ofthe electronic device based on the analyzed sensor data.

Note that the sensor may provide the sensor data without or excluding:communication between the environmental monitoring device and theelectronic device; and/or electrical coupling between the environmentalmonitoring device and the electronic device.

In some embodiments, the environmental monitoring device includes aprocessor, and a memory that which stores a program module which isexecuted by the processor. The program module includes instructions for:receiving the sensor data, the analyzing, and the providing.

Moreover, analyzing the sensor data may involve comparing the sensordata to a threshold value.

Furthermore, the maintenance notification may include: an instruction tochange a filter, an instruction to perform maintenance on the electronicdevice, an instruction to replace a power source in the electronicdevice, and/or an instruction to replace a sensor in the electronicdevice.

Additionally, the environmental monitoring device may order areplacement component for the electronic device based on the maintenancenotification; and/or may record, in a historical record for theenvironment, the maintenance notification and a subsequent remedialaction associated with the electronic device that is performed inresponse to the maintenance notification.

In some embodiments, the environmental monitoring device provides acommand to an access-control device for the external environment basedon the maintenance notification.

Note that the maintenance notification may be provided to a third partythat performs maintenance (e.g., a maintenance service) on theelectronic device. This third party may be other than a user associatedwith the environmental monitoring device and a provider of theenvironmental monitoring device.

In some embodiments, the environmental monitoring device includes anantenna, and an interface circuit that communicates with anotherelectronic device, where the providing involves communicating with theother electronic device via the interface circuit and the antenna.

Another embodiment provides a computer-program product for use inconjunction with the environmental monitoring device. Thiscomputer-program product may include instructions for at least some ofthe aforementioned operations performed by the environmental monitoringdevice.

Another embodiment provides a method for providing a maintenancenotification, which may be performed by the processor in theenvironmental monitoring device. During operation, the processorreceives the sensor data associated with the sensor in the environmentalmonitoring device, where the sensor data is for the external environmentthat includes the environmental monitoring device, and the sensor datarepresents the environmental condition that is associated with operationof the electronic device in the external environment. Then, theprocessor analyzes the sensor data. Moreover, the processor provides themaintenance notification related to the operation of the electronicdevice based on the analyzed sensor data.

Another embodiment provides a system that includes the environmentalmonitoring device and the electronic device.

The preceding summary is provided as an overview of some exemplaryembodiments and to provide a basic understanding of aspects of thesubject matter described herein. Accordingly, the above-describedfeatures are merely examples and should not be construed as narrowingthe scope or spirit of the subject matter described herein in any way.Other features, aspects, and advantages of the subject matter describedherein will become apparent from the following Detailed Description,Figures, and Claims.

BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a block diagram illustrating electronic devices communicatingin accordance with an embodiment of the present disclosure.

FIG. 2 is a block diagram illustrating an environmental monitoringdevice of FIG. 1 in accordance with an embodiment of the presentdisclosure.

FIG. 3 is a block diagram illustrating a data structure with sensor datain the electronic device of FIG. 2 in accordance with an embodiment ofthe present disclosure.

FIG. 4 is a block diagram illustrating an archive device of FIG. 1 inaccordance with an embodiment of the present disclosure.

FIG. 5 is a block diagram illustrating a data structure with ahistorical record in the archive device of FIG. 4 in accordance with anembodiment of the present disclosure.

FIG. 6 is a drawing illustrating a front view of an environmentalmonitoring device in FIG. 1 in accordance with an embodiment of thepresent disclosure.

FIG. 7 is a drawing illustrating a side view of the environmentalmonitoring device in FIG. 6 in accordance with an embodiment of thepresent disclosure.

FIG. 8 is a drawing illustrating a rear view of the environmentalmonitoring device in FIG. 6 in accordance with an embodiment of thepresent disclosure.

FIG. 9 is a drawing illustrating a front view of an environmentalmonitoring device in FIG. 1 in accordance with an embodiment of thepresent disclosure.

FIG. 10 is a drawing illustrating a side view of the environmentalmonitoring device in FIG. 9 in accordance with an embodiment of thepresent disclosure.

FIG. 11 is a flow diagram illustrating a method for providing feedbackin accordance with an embodiment of the present disclosure.

FIG. 12 is a drawing illustrating communication between an environmentalmonitoring device and an aggregation device during the method of FIG. 11in accordance with an embodiment of the present disclosure.

FIG. 13 is a flow diagram illustrating a method for determining a riskmetric in accordance with an embodiment of the present disclosure.

FIG. 14 is a drawing illustrating communication between an electronicdevice and a set of electronic devices during the method of FIG. 13 inaccordance with an embodiment of the present disclosure.

FIG. 15 is a flow diagram illustrating a method for providing acertified data package in accordance with an embodiment of the presentdisclosure.

FIG. 16 is a drawing illustrating communication between an environmentalmonitoring device and an archive device during the method of FIG. 15 inaccordance with an embodiment of the present disclosure.

FIG. 17 is a flow diagram illustrating a method for modifying anoperating condition in accordance with an embodiment of the presentdisclosure.

FIG. 18 is a drawing illustrating communication between an electronicdevice, a regulator device and/or another electronic device during themethod of FIG. 17 in accordance with an embodiment of the presentdisclosure.

FIG. 19 is a flow diagram illustrating a method for authorizing accessto sensor data in accordance with an embodiment of the presentdisclosure.

FIG. 20 is a drawing illustrating communication between an environmentalmonitoring device, an archive device and another electronic deviceduring the method of FIG. 19 in accordance with an embodiment of thepresent disclosure.

FIG. 21 is a flow diagram illustrating a method for providing amaintenance notification in accordance with an embodiment of the presentdisclosure.

FIG. 22 is a drawing illustrating communication between an environmentalmonitoring device and another electronic device during the method ofFIG. 21 in accordance with an embodiment of the present disclosure.

Note that like reference numerals refer to corresponding partsthroughout the drawings. Moreover, multiple instances of the same partare designated by a common prefix separated from an instance number by adash.

DETAILED DESCRIPTION

In one group of embodiments, an environmental monitoring device thatmonitors the operation of a legacy electronic device is described. Inparticular, a sensor in the environmental monitoring device providessensor data (such as temperature, humidity, acoustic information, aparticle count, a particle size, etc.) that represents an environmentalcondition (such as presence of an allergen, fire, flooding, a poweroutage, an infestation, etc.) in an external environment that includesthe environmental monitoring device. This environmental condition isassociated with the operation of the legacy electronic device in theexternal environment (such as a smoke detector, a thermostat, acarbon-monoxide detector, an appliance, a clock, a security alarm, ahumidifier, an air filter, a switch, etc.). The environmental monitoringdevice analyzes the sensor data and provides feedback about theoperation of the legacy electronic device based on the analyzed sensordata. Moreover, the sensor provides the sensor data without or excludingcommunication and/or electrical coupling between the environmentalmonitoring device and the legacy electronic device.

In this way, the environmental monitoring device facilitates monitoring,analysis and feedback of the sensor data without directly interactingwith the legacy electronic device. These capabilities may allow theenvironmental monitoring device to provide additional services bysupplementing the existing legacy electronic devices instead ofrequiring that these electronic devices be replaced. In addition tobeing more cost effective, this approach may significantly increase therate of adoption of the environmental monitoring device, therebyenhancing commercial activity. Furthermore, the additional services mayenhance customer satisfaction with both the legacy electronic devicesand the environmental monitoring device.

In a second group of embodiments, an electronic device that determines arisk metric for a physical object associated with an environment isdescribed. This electronic device receives sensor data from a set ofelectronic devices (which may or may not include the electronic device)that are located in separate, neighboring or proximate environments. Thesensor data represents environmental conditions in these environments.By analyzing and comparing the sensor data, the electronic deviceassesses the environmental condition and determines the risk metric forat least one of the environments (such as a risk metric for a powerfailure). Furthermore, the risk metric may be used to calculate afinancial value, such as a commercial value or an insurance premium ofthe physical object associated with at least the one environment. Notethat the physical object may be included in at least the one environmentor at least the one environment may include the physical object. Forexample, at least the one environment may include: a portion of abuilding, the building, a container, a vehicle, a liquid, and/or a traincar.

By facilitating aggregated monitoring of at least the one environment,the electronic device can assess, on an ongoing basis, the impact of oneor more environmental factors (and, more generally, the environmentalcondition) on the quality and/or value of the physical object. Thisdata-driven assessment of risk may allow services to be provided tocustomers ranging from: an owner of the physical object, a realtor,potential buyers and/or renters of the physical object, an insurancecompany, an insurance broker, a shipping or transportation company, etc.Furthermore, the information collected and analyzed by the electronicdevice may be used to guide remedial action to protect the physicalobject. Thus, the electronic device may facilitate a wide variety ofvalue-added commercial activities.

In a third group of embodiments, an environmental monitoring device thatmonitors an environment and maintains a secure, certified historicalrecord of an environmental condition in the environment is described. Inparticular, a sensor in the environmental monitoring device providessensor data that represents the environmental condition in theenvironment. This sensor data is securely processed in a secure channelin a processor in the environmental monitoring device. The secureprocessing may include generating a digital signature associated withthe secure channel (e.g., using a secure hash function and/or anencryption key). Then, a certified data package (with the sensor data oranalyzed sensor data, the digital signature, location information and anassociated time stamp) is securely communicated to an archive device,and the archive device may include the certified data package in thehistorical record or log for the environment.

The ongoing record maintained by the environmental monitoring device andthe archive device may be used to determine a risk metric for a physicalobject associated with the environment. For example, the physical objectmay be included in the environment or the environment may include thephysical object. Moreover, the risk metric may be used to calculate afinancial value associated with the physical object, such as acommercial value or an insurance premium.

In this way, the environmental monitoring device can assess, on anongoing basis, the impact of one or more environmental factors (and,more generally, the environmental condition) on the quality and/or valueof the physical object. This data-driven assessment of risk may allowservices to be provided to customers ranging from: an owner of thephysical object, a realtor, potential buyers and/or renters of thephysical object, an insurance company, an insurance broker, a shippingor transportation company, etc. Furthermore, the information collectedand analyzed by the electronic device may be used to guide remedialaction to protect the physical object. Thus, the electronic device mayfacilitate a wide variety of value-added commercial activities.

In a fourth group of embodiments, an electronic device that modifies anoperating condition of a regulator device based on a medical conditionof an individual is described. The electronic device receives oraccesses information specifying the medical condition (such as anallergy, a chemical sensitivity, an illness, a chronic disease, etc.).The information is then used to determine a target value of anenvironmental condition in an environment. Subsequently, the electronicdevice provides sensor data representing the environmental condition.This sensor data is compared to the target value and, based on thecomparison, the operating condition of a regulator device in theenvironment is modified. For example, the regulator device may regulatethe environmental condition (such as a thermostat, a humidifier, an airpurifier, a ventilator device, a window opener, a door opener, etc.). Ifa magnitude of a deviation of the sensor data from the target valueexceeds a threshold, the operating condition may be modified to reducethe deviation. Moreover, the electronic device may provide the modifiedoperating condition to the individual or directly to the regulatordevice.

In this way, the electronic device may allow the individual, directly orindirectly, to monitor and maintain the environmental condition in amanner that increases their comfort and overall health given theconstraints imposed by the medical condition. In addition, theelectronic device may perform these functions either with or withoutdirect interaction (such as communication or electrical coupling) to theregulator device. Thus, the electronic device may be capable of beingused flexibly in a dynamic feedback control system or with a legacyelectronic device. Consequently, the electronic device may assist theindividual in a cost-effective and valuable way, thereby increasingtheir satisfaction with the electronic device and/or a legacy electronicdevice.

In a fifth group of embodiments, an environmental monitoring device thatenables access to protected sensor data stored in a remote archive isdescribed. This environmental monitoring device collects sensor datathat represents an environmental condition in an environment. Afterprotecting the sensor data (e.g., using a secure hash function, a randomnumber and/or an identifier of the environmental monitoring device), theenvironmental monitoring device provides the protected sensor data to anarchive device. Subsequently, when the environmental monitoring devicereceives a request for the sensor data from another electronic device,the environmental monitoring device may provide authorizationinformation to the archive device to release the sensor data to theother electronic device. Note that the authorization information may bebased on a predefined authorization preference of a user associated withthe environmental monitoring device or on feedback from the user aboutthe request (such as user approval of the request). The environmentalmonitoring device may also provide information specifying how tounprotect the sensor data to the archive device and/or the otherelectronic device.

In this way, the environmental monitoring device may facilitatecollection and secure, low-cost storage of the protected sensor data,while allowing authorized recipients (such as the other electronicdevice) access to the sensor data. These capabilities may allow theenvironmental monitoring device to facilitate a wide range applicationsand services that leverage the protected sensor data to the user of theenvironmental monitoring device, as well as other individuals andorganizations. Consequently, the environmental monitoring device maypromote commercial activity, data sharing, and cross-platform services.

In a sixth group of embodiments, an environmental monitoring device thatprovides maintenance notifications is described. The environmentalmonitoring device provides sensor data that represents an environmentalcondition in an environment. This sensor data is associated withoperation of an electronic device in the external environment. Then, theenvironmental monitoring device analyzes the sensor data and providesthe maintenance notification related to the operation of the electronicdevice based on the analyzed sensor data. For example, the environmentalmonitoring device may compare the sensor data to a threshold (such as amaximum value or a minimum value of the environmental condition). If thethreshold is exceeded, the environmental monitoring device may providethe maintenance notification, such as an instruction to: change afilter, perform maintenance, replace a battery, order a replacementcomponent, etc. In addition, the environmental monitoring device mayrecord, in a historical record for the environment, the maintenancenotification and a subsequent remedial action (if any) associated withthe electronic device that is performed in response to the maintenancenotification. Note that the environmental monitoring device may providethe sensor data without or excluding interaction (such as communicationor electrical coupling) with the electronic device.

In these ways, the environmental monitoring device may facilitatecontinued and/or improved operation of the electronic device and, thus,may help maintain the environment. Moreover, by allowing theenvironmental monitoring device to provide the maintenance notificationwithout requiring interaction with the electronic device, theenvironmental monitoring device may be able to help automate maintenanceof a legacy electronic device. These capabilities may be a valuableservice for an owner of the electronic device, as well as repairservices and component suppliers. Consequently, the environmentalmonitoring device may increase customer satisfaction and may increasecommercial activity.

Communication between electronic devices (such as the environmentalmonitoring device and the archive device) may utilize wired, opticaland/or wireless communication. For example, the wireless communicationmay involve communicating packets or frames that are transmitted andreceived by radios in the electronic devices in accordance with acommunication protocol, such as: Bluetooth™ (from the Bluetooth SpecialInterests Group of Kirkland, Wash.), an Institute of Electrical andElectronics Engineers (IEEE) 802.15 standard (such as ZigBee® from theZigBee® Alliance of San Ramon, Calif.), an Institute of Electrical andElectronics Engineers (IEEE) 802.11 standard, a power-line communicationstandard, an infra-red communication standard, a universal serial bus(USB) communication standard, a near-field-communication standard orspecification (from the NFC Forum of Wakefield, Mass.), another wirelessadhoc network standard, and/or another type of wireless interface. Insome embodiments, the communication protocol may be compatible with a2^(nd) generation or mobile telecommunication technology, a 3^(rd)generation of mobile telecommunications technology (such as acommunication protocol that complies with the International MobileTelecommunications-2000 specifications by the InternationalTelecommunication Union of Geneva, Switzerland), a 4^(th) generation ofmobile telecommunications technology (such as a communication protocolthat complies with the International Mobile Telecommunications Advancedspecification by the International Telecommunication Union of Geneva,Switzerland), and/or another cellular-telephone communication technique.For example, the communication protocol may include Long Term Evolutionor LTE. In the discussion that follows, ZigBee® is used as anillustrative example. In addition, the communication may occur via awide variety of frequency bands, including frequencies associated withthe so-called ‘white space’ in frequencies bands associated with analogtelevision broadcasting.

The communication between the electronic devices is shown in FIG. 1,which presents a block diagram illustrating communication amongenvironmental monitoring devices 110, electronic devices 114 (such asregulator devices e.g., electronic device 114-2, and/or legacyelectronic devices, e.g., electronic device 114-1) and data-sharingelectronic device 118 using wireless signals, and communication withoptional computer 120 and optional network 122 (such as the Internet, awireless local area network, an Ethernet network, an intra-net, anoptical network, etc.) and aggregating or archive device 116 (which mayor may not involve wireless signals). As described further below withreference to FIGS. 11-22, environmental monitoring devices 110 maymonitor environmental conditions in one or more environments 112 (suchas a portion of a building, the building, a container or a package, avehicle, a liquid, and/or a train car) that include electronic devices114. (Note that one or more of environmental monitoring devices 110 maybe immersed in a liquid, and environments 112 may be at fixed locationsor time-varying locations.) For example, at least some of environmentalmonitoring devices 110 may include sensors that provide sensor data thatreflects the environmental conditions in the one or more environments112. In general, the sensor data may be provided without or excludinginteraction (such as communication and/or electrical coupling) betweenenvironmental monitoring devices 110 and electronic devices 114. Thus,sensors in environmental monitoring devices 110 may indirectly inferinformation about the operation and/or the performance of electronicdevices 114 based on the monitored environmental conditions. However, insome embodiments at least some of environmental monitoring devices 110interact directly with at least some of electronic devices 114 (viacommunication or electrical coupling), thereby facilitating directmeasurement of the sensor data, as well as feedback control of theseelectronic devices by at least some of environmental monitoring devices110. In some embodiments, one or more of environmental monitoringdevices 110 is integrated into one or more other electronic device, suchas one or more of electronic devices 114.

The sensor data may be analyzed locally by at least one of environmentalmonitoring devices 110 and/or remotely by archive device 116. Moreover,the sensor data and/or the analyzed sensor data may be communicatedamong environmental monitoring devices 110. In particular, environmentalmonitoring devices 110 may form a ZigBee® mesh network, with ZigBee® enddevices communicating with a ZigBee® coordinator (such as environmentalmonitoring device 110-1) via one or more optional ZigBee® routers. Then,environmental monitoring device 110-1 may communicate (wirelessly and/orvia optional computer 120 and optional network 122) the sensor dataand/or the analyzed sensor data to archive device 116.

In addition, the sensor data and/or the analyzed sensor data may becommunicated or shared with one or more other electronic devices, suchas data-sharing electronic device 118 (e.g., a cellular telephone or aportable electronic device) and/or remote servers or computers not shownin FIG. 1. For example, the sensor data and/or the analyzed sensor datamay be communicated to data-sharing electronic device 118 by at leastsome of environmental monitoring devices 110, such as the one or moreoptional ZigBee® routers and/or the ZigBee® coordinator. (Thus, at leastsome of environmental monitoring devices 110 may function as sensor-datahubs for other environmental monitoring devices 110.) Alternatively, thesensor data and/or the analyzed sensor data may be communicated todata-sharing electronic device 118 by archive device 116 using wired,optical and/or wireless communication.

As described further below with reference to FIGS. 15 and 16, and 19 and20, in general, the sensor data and/or the analyzed sensor data that iscommunicated and/or stored by environmental monitoring devices 110and/or archive device 116 may be protected. For example, the sensor datamay be encrypted, digitally signed and/or securely hashed (such as usinga one-way cryptographic hash function) by environmental monitoringdevices 110. Furthermore, archive device 116 may store the sensor dataand/or the analyzed sensor data in secure, certified historical recordsor logs of the environmental conditions in environments 112. Inprinciple, the information stored by archive device 116 may beprotected. However, in some embodiments, users of environmentalmonitoring devices 110, who, in general, control how their data is usedand shared, may instruct environmental monitoring devices 110 toprovide, via the mesh network, information to archive device 116 thatallows archive device 116 to unprotect the sensor data and/or theanalyzed sensor data. Similarly, in response to requests from authorizedrecipients for the sensor data and/or the analyzed sensor data (such asa request from data-sharing electronic device 118), archive device 116may provide access to the stored sensor data and/or the analyzed sensordata. If the sensor data and/or the analyzed sensor data is protected,the associated environmental monitoring devices 110 may provideprotection information to data-sharing electronic device 118 that allowsdata-sharing electronic device 118 to unprotect the sensor data and/orthe analyzed sensor data.

Environmental monitoring devices 110 may allow a variety of services tobe offered to: users associated with environmental monitoring devices110 (such as owners or renters of these environmental monitoringdevices), suppliers of components or spare parts, maintenance personnel,insurance companies, insurance brokers, realtors, leasing agents,apartment renters, hotel guests, businesses, organizations, governments,potential buyers of physical objects, a shipping or transportationcompany, etc. For example, as described further below with reference toFIGS. 11 and 12, based on the analyzed sensor data feedback about theoperation of one or more of electronic devices 114 (such as a legacyelectronic device) may be provided by one or more of environmentalmonitoring devices 110 on displays, using speakers and, more generally,on physiological output devices that provide sensory information. Thus,a user may be alerted if a legacy electronic device is not functioningproperly. More generally, the feedback may indicate the presence of anenvironmental condition in one of environments 112, such as: presence ofan allergen, fire, flooding, a power outage, a chemical contaminant, aninfestation, etc.

Alternatively or additionally, as described further below with referenceto FIGS. 13 and 14, one or more of environmental monitoring devices 110and/or archive device 116 may assess the impact of one or moreenvironmental factors (and, more generally, the environmental condition)on the quality and/or value of a physical object associated with one ofenvironments 112 on an ongoing basis. For example, one or more ofenvironmental monitoring devices 110 and/or archive device 116 maydetermine a risk metric for the physical object by comparing the sensordata from at least a subset of electronic devices 110. This risk metricmay be used to calculate a financial value, such as a commercial valueor an insurance premium relating to the physical object (e.g., insuringthe physical object itself, or insuring the active use of the physicalobject, such as liability insurance).

As described further below with reference to FIGS. 17 and 18, in someembodiments one or more of environmental monitoring devices 110 and/orarchive device 116 may maintain an environmental condition in one ofenvironments 112 based on a medical condition of an individual (such asan allergy, a chemical sensitivity, an illness, a chronic disease,etc.). In particular, the operating condition of a regulator device(such as one of electronic devices 114, e.g., a thermostat, ahumidifier, an air purifier, a ventilator device, a window opener, adoor opener, etc.) that regulates an environmental condition may bemodified based on a comparison of the sensor data and a target value ofthe environmental condition in one of environments 112 (which isdetermined based on the medical condition). Then, the modified operatingcondition may be provided to the individual or, when possible, directlyto the regulator device (thus, the modified operation condition mayinclude a control signal for the regulator device). Note that themedical condition of an individual can include a psychologicalcomforting effect (e.g., warming up a room before the user enters it),or even a placebo effect in which the environmental factor has no knownbenefits (and may even have drawbacks or random effects) according toscientific studies, but by making a user more comfortable the modifiedenvironmental factors provide psychological comfort to the user (whichcan be categorized as a form of placebo effect). Furthermore, theenvironmental condition in one of environments 112 can be based on auser preference, e.g., lowering the temperature of a bedroom beforebedtime, etc.

Additionally, as described further below with reference to FIGS. 21 and22, in some environments one or more of environmental monitoring devices110 provide a maintenance notification based on the analyzed sensordata, which is associated with the operation of one of electronicdevices 114 (such as a legacy electronic device or an electronic devicethat is included in a feedback loop with one of environmental monitoringdevices 110) and which represents an environmental condition in one ofenvironments 112. For example, the maintenance notification may includean instruction to: change a filter, perform maintenance, replace abattery, order a replacement component, etc. In addition, themaintenance notification and any subsequent remedial action (such as arepair or service performed on one of electronic devices 114) may bestored in a historical record or log for one or more of environments 112(such as a historical record maintained by archive device 116).

In these ways, environmental monitoring devices 110 and/or archivedevice 116 may be used to: implement an information network with one ormore legacy electronic devices; securely aggregate and selectivelydisseminate sensor data about environmental conditions: calculate thefinancial impact of environmental conditions; and facilitate monitoringand maintaining of one or more environmental conditions in environments112.

As noted previously, the communication between environmental monitoringdevices 110, electronic devices 114, archive device 116, data-sharingelectronic device 118 and/or optional computer 120 may involve theexchange of packets. These packets may be included in frames in one ormore wireless channels.

Moreover, as described further below with reference to FIG. 2,environmental monitoring devices 110, archive device 116, data-sharingelectronic device 118, optional computer 120 and/or optionally some ofelectronic devices 114 (such as electronic device 114-2) may includesubsystems, such as: a networking subsystem, a memory subsystem, aprocessing subsystem, an optional user-interface subsystem, and a sensorsubsystem. In addition, these electronic devices may include radios 126in the networking subsystems. More generally, environmental monitoringdevices 110, archive device 116, data-sharing electronic device 118,optional computer 120 and/or optionally some of electronic devices 114can include (or can be included within) any electronic devices withnetworking subsystems that enable wirelessly communication with anotherelectronic device. This can comprise transmitting frames on wirelesschannels to enable the electronic devices to make initial contact,followed by exchanging subsequent data/management frames (such asconnect requests or petitions to establish a connection or link),configuring security options (e.g., encryption on a link or in a meshnetwork), transmitting and receiving packets or frames, etc.

As can be seen in FIG. 1, wireless signals 124 (represented by a jaggedline) are transmitted from/received by radios 126 in environmentalmonitoring devices 110, data-sharing electronic device 118, optionalcomputer and/or optionally some of electronic devices 114 (such aselectronic device 114-2). In general, wireless communication among theseelectronic devices may or may not involve a connection being establishedbetween the electronic devices, and therefore may or may not involvecommunication via a wireless network. (Note that the communicationbetween optional computer 120 and archive device 116 may occur viaoptional network 122, which may involve wired or optical communicationwith a different communication protocol than wireless signals 124.)

Furthermore, the processing of a packet or frame in an electronic device(such as environmental monitoring device 110-1) may include: receivingwireless signals 124 with the packet or frame; decoding/extracting thepacket or frame from received wireless signals 124 to acquire the packetor frame; and processing the packet or frame to determine informationcontained in the packet or frame (such as at least a portion of acertified data packet).

As noted previously, in general communication among the electronicdevices may be protected. This may involve encryption using anencryption key (such as an encryption key associated with one ofenvironmental monitoring devices 110 and/or a secure channel in aprocessor in one of environmental monitoring devices 110). Theencryption key may use symmetric or asymmetric encryption techniques.Alternatively or additionally, a secure hash function (such as SHA-256)may be used. For example, the secure hash may supplement encryption thatis associated with a network interface in one or more of environmentalmonitoring devices 110.

Although we describe the environment shown in FIG. 1 as an example, inalternative embodiments, different numbers or types of electronicdevices may be present. For example, some embodiments comprise more orfewer electronic devices.

We now describe embodiments of the environmental monitoring device, thearchive device, and other electronic devices in FIG. 1. FIG. 2 presentsa block diagram illustrating environmental monitoring device 200, suchas one of environmental monitoring devices 110. This electronic deviceincludes processing subsystem 210, memory subsystem 212, a networkingsubsystem 214, an optional user-interface subsystem 216, sensorsubsystem 218 (i.e., a data collection subsystem), and feedbacksubsystem 232. Processing subsystem 210 includes one or more devicesconfigured to perform computational operations. For example, processingsubsystem 210 can include one or more microprocessors,application-specific integrated circuits (ASICs), microcontrollers,programmable-logic devices, and/or one or more digital signal processors(DSPs).

In addition, processing subsystem 210 may include an optional securechannel 220 that performs secure processing of information, securelycommunicates with other components in environmental monitoring device200, and more generally performs secure services. This secure channelmay include one or more processors, a secure boot ROM, one or moresecurity peripherals, and/or other components. The security peripheralsmay be hardware-configured to assist in the secure services performed byoptional secure channel 220. For example, the security peripherals mayinclude: authentication hardware implementing various authenticationtechniques, encryption hardware configured to perform encryption,secure-interface controllers configured to communicate over a secureinterface to other components, and/or other components. In someembodiments, instructions executable by optional secure channel 220 arestored in a trust zone in memory subsystem 212 that is assigned tooptional secure channel 220, and optional secure channel 220 fetches theinstructions from the trust zone for execution. Optional secure channel220 may be isolated from the rest of processing subsystem 210 except fora carefully controlled interface, thus forming a secure region foroptional secure channel 220 and its components. Because the interface tooptional secure channel 220 is carefully controlled, direct access tocomponents within optional secure channel 220 (such as a processor or asecure boot ROM) may be prevented. In some embodiments, optional securechannel 220 encrypts and/or decrypts authentication informationcommunicated with optional user-interface subsystem 216 and/or receivedvia networking subsystem 214, and encrypts and/or decrypts information(such as sensor data) communicated with sensor subsystem 218.

Memory subsystem 212 includes one or more devices for storing dataand/or instructions for processing subsystem 210, networking subsystem214, optional user-interface subsystem 216 and/or sensor subsystem 218.For example, memory subsystem 212 can include dynamic random accessmemory (DRAM), static random access memory (SRAM), and/or other types ofmemory. In some embodiments, instructions for processing subsystem 210in memory subsystem 212 include: one or more program modules 238 or setsof instructions (such as an environmental monitoring application, afinancial application, a data-logging application, a medicalapplication, a data-sharing application, and/or a maintenanceapplication), which may be executed in an operating environment (such asoperating system 236) by processing subsystem 210. Note that the one ormore computer programs may constitute a computer-program mechanism or aprogram module. Moreover, instructions in the various modules in memorysubsystem 212 may be implemented in: a high-level procedural language,an object-oriented programming language, and/or in an assembly ormachine language. Furthermore, the programming language may be compiledor interpreted, e.g., configurable or configured (which may be usedinterchangeably in this discussion), to be executed by processingsubsystem 210.

In addition, memory subsystem 212 can include mechanisms for controllingaccess to the memory. In some embodiments, memory subsystem 212 includesa memory hierarchy that comprises one or more caches coupled to a memoryin environmental monitoring device 200. In some of these embodiments,one or more of the caches is located in processing subsystem 210.

In some embodiments, memory subsystem 212 is coupled to one or morehigh-capacity mass-storage devices (not shown). For example, memorysubsystem 212 can be coupled to a magnetic or optical drive, asolid-state drive, or another type of mass-storage device. In theseembodiments, memory subsystem 212 can be used by environmentalmonitoring device 200 as fast-access storage for often-used data, whilethe mass-storage device is used to store less frequently used data.

Networking subsystem 214 includes one or more devices configured tocouple to and communicate on a wired, optical and/or wireless network(i.e. to perform network operations), including an interface circuit 222(such as a ZigBee® communication circuit) and one or more antennas 224.For example, networking subsystem 214 can include: a ZigBee® networkingsubsystem, a Bluetooth™ networking system (which can include Bluetooth™Low Energy, BLE or Bluetooth™ LE), a cellular networking system (e.g., a5G/4G network such as UMTS, LTE, etc.), a USB networking system, anetworking system based on the standards described in IEEE 802.11 (e.g.,a Wi-Fi® networking system), an Ethernet networking system, an infra-redcommunication system, a power-line communication system and/or anothercommunication system (such as a near-field-communication system or anadhoc-network networking system).

Moreover, networking subsystem 214 includes processors, controllers,radios/antennas, sockets/plugs, and/or other devices used for couplingto, communicating on, and handling data and events for each supportednetworking or communication system. Note that mechanisms used forcoupling to, communicating on, and handling data and events on thenetwork for each network system are sometimes collectively referred toas a ‘network interface’ for the network system. Moreover, in someembodiments a ‘network’ between the electronic devices does not yetexist. Therefore, environmental monitoring device 200 may use themechanisms in networking subsystem 214 for performing simple wirelesscommunication between environmental monitoring device 200 and otherelectronic devices, e.g., transmitting advertising frames, petitions,beacons and/or information associated with near-field communication.

Optional user-interface subsystem 216 may include one or moreprocessors, controllers and devices for receiving information for a userof environmental monitoring device 200. For example, optionaluser-interface subsystem 216 may include a user-interface device 226,such as: a keypad, a touch-sensitive display, optical characterrecognition, image recognition, gesture recognition, biometricrecognition (such as a fingerprint, a palm print, a retinal pattern,etc.), and/or voice recognition. The information may include:authentication information from the user (such as a passcode forunlocking access to environmental monitoring device 200 and/or some ofthe functionality of environmental monitoring device 200); user-feedbackabout a request for access to sensor data associated with environmentalmonitoring device 200; and/or user preferences for operation ofenvironmental monitoring device 200 (such as alarm settings, when and/orhow to provide notifications, etc.). This information may be securelycommunicated to processing subsystem 210 (such as by encrypting theinformation). In addition, the information communicated may also includean encryption key that is specific to environmental monitoring device200 and/or components in environmental monitoring device 200, such asoptional secure channel 220.

Furthermore, sensor subsystem 218 may include one or more sensor devices228 (or a sensor array), which may include one or more processors andmemory. For example, the one or more sensor devices 228 may include: athermal sensor (such as a thermometer), a humidity sensor, a barometer,a camera or video recorder (such as a CCD or CMOS imaging sensor), oneor more microphones (which may be able to record acoustic information inmono or stereo), an infrared sensor, a microscope, a particle detector,an optical particle sensor, an ionization particle sensor, a smokedetector, a chemical sensor or detector, a chemical-analysis device, amass spectrometer, a microanalysis device, a nano-plasmonic sensor, agenetic sensor (such as a micro-array), an accelerometer, a position ora location sensor (such as a location sensor based on the GlobalPositioning System or GPS), a gyroscope, a motion sensor, a vibrationsensor, a fluid flow sensor, a photo-detector, a Geiger counter, aradio-frequency radiation detector, and/or another device that measuresa physical effect or that characterizes an environmental factor orphysical phenomenon (either directly or indirectly).

Moreover, the one or more sensor devices 228 may include redundancy toaddress sensor failure or erroneous readings, or to provide improvedaccuracy and/or precision. Note that sensor data acquired by the one ormore sensor devices 228 may be securely communicated to processingsubsystem 210 (such as by encrypting the sensor data). In addition, thesensor data communicated may also include a digital signature that isspecific to environmental monitoring device 200 and/or components inenvironmental monitoring device 200, such as optional secure channel220.

Feedback subsystem 232 may include a display 234 for displayinginformation, such as feedback about an environmental condition in anenvironment that includes environmental monitoring device 200 or amaintenance notification associated with a regulator device in theenvironment. In particular, feedback subsystem 232 may include a displaydriver and display 234, such as: a liquid-crystal display, an e-inkdisplay, an organic light emitting diode display, a braille outputdevice, a laser projection display, a multi-touch touchscreen, acolor-wheel display, etc. Note that display subsystem 232 may beincluded in optional user-interface subsystem 216.

During operation of environmental monitoring device 200, processingsubsystem 210 may execute one or more program modules 238, such as anenvironmental monitoring application. In particular, environmentalmonitoring application may instruct one or more sensor devices 228 tomeasure or acquire sensor data that represents one or more environmentalconditions in an environment that includes environmental monitoringdevice 200. For example, the environmental condition may include:presence of an individual (such as a resident or a potential burglar),presence of a chemical compound (such as exhaust, carbon monoxide,radon, smoke, a non-volatile organic compound and/or a volatile organiccompound), presence of an allergen (such as dander or pollen), presenceof dust, presence of a fungus, a fire, presence of smoke, flooding, awater leak, a chemical leak, presence of an insect or rodent (and, moregenerally, an infestation), discharge of a firearm, a possiblealtercation or criminal act (such as domestic violence), a medicalemergency, availability of electrical power (such as whether there is apower failure), a lighting condition (such as whether the lights are onor off), temperature deviating from a predefined target, and/or humiditydeviating from a predefined target. In some embodiments, theenvironmental condition is associated with the operation of a regulatordevice (which may or may not be a legacy electronic device). Theregulator device (and, more generally, one of electronic devices 114 inFIG. 1) may include: a smoke detector, a thermostat, a carbon-monoxidedetector, an appliance, a clock, a security alarm, a humidifier, an airfilter, a switch, a light, etc. Note that the monitoring of the sensordata may be continuous, periodic (such as after a time interval haselapsed) or as needed (such as event-driven monitoring).

The sensor data may be communicated to processing subsystem 210. Then,the environmental monitoring application may optionally analyze thesensor data, e.g., calculating a discrete or a Fourier transform,determining a histogram, performing filtering or signal processing,perform data compression, calibrating one or more of sensor devices 228,identifying one or more of sensor devices 228 that are not working orwhich are outputting erroneous sensor data, applying anothertransformation, calculating statistics (such as moments of adistribution), performing supervised learning (such as Bayesiananalysis), performing noise reduction, normalizing the sensor data,converting units, etc. (Alternatively or additionally, the sensor datamay be communicated to another electronic device using networkingsubsystem 214 and the analysis may be performed remotely, e.g. byarchive device 116 in FIGS. 1 and 4.) For example, the analysis maydetermine whether an environmental condition is present in theenvironment. Then, the environmental monitoring application may providefeedback to a user of environmental monitoring device 200 or directly toone of electronic devices 114 in FIG. 1 (if this electronic device isable to communicate with environmental monitoring device 200 vianetworking subsystem 214). In particular, the environmental monitoringapplication may instruct feedback subsystem 232 to provide sensoryinformation, such as a text or graphical message, a video displayed ondisplay 234 and/or a sound or audio message output by optional speakers240. For example, the sensory information may include: a range ofvalues, numerical measurements, shades of gray (or grayscale), colors,chemical formulas, images, textures, patterns (which may correspond toone or more environmental conditions), tessellations with gradients oflarger or smaller element sizes, and/or tessellations of increasing ordecreasing element sizes (such as tessellation that are adjusted to belarger or smaller as a given environmental condition increases ordecreases). Thus, in some embodiments the sensory information includes achange in the color of environmental monitoring device 200.Alternatively or additionally, the feedback may be communicated usingnetworking subsystem 214 and presented to the user (or otherindividuals) on another electronic device, such as data-sharingelectronic device 118 (FIG. 1) or a different electronic device (such asthe user's cellular telephone, tablet computer or computer) that is usedfor remote visualization of: the sensor data, the analyzed sensor data,the environmental condition and/or the feedback.

In some embodiments, the environmental monitoring application mayprovide, via networking subsystem 214, the feedback to one or more ofenvironmental monitoring devices 110 (FIG. 1) and/or other electronicdevices (such as computers or servers associated with or operated onbehalf of: component suppliers, retailers, insurance companies,maintenance organizations, shipping companies, landlords or propertyowners, a corporate-compliance organization, inspectors, businesses,government agencies, etc.). For example, the environmental monitoringapplication may utilize a Short Message Service, email, a social networkand/or a messaging service with a restricted number of characters permessage. Alternatively or additionally, the feedback may be posted to aweb page or website (and, more generally, a location on a network), andone or more recipients may be notified via networking subsystem 214,e.g., a link to the location may be provided to the recipients.

Note that the sensor data and/or the analyzed sensor data may be stored,at least temporarily, in a data structure in memory subsystem 212. Thisis shown in FIG. 3, which presents a data structure 300. In particular,data structure 300 may include entries 308 with: sensor data 310,timestamps 312, locations 314, optional analyzed sensor data 316, and/orenvironmental conditions 318.

Referring back to FIG. 2, in some embodiments the analysis is based oncomparisons of sensor data associated with environmental conditions inmultiple environments (which may be separate from each other, butproximate or nearby one another). For example, sensor data from otherenvironmental monitoring devices 110 in FIG. 1 may be received vianetworking subsystem 214. If the sensor data indicates that multipleadjacent houses in a neighborhood do not have electrical power, it ismore likely that the cause is a power failure than it is if only onehouse does not have electrical power. Thus, the environments may beassociated with separate entities, such as the owners of the houses orthe users of environmental monitoring devices 110 (FIG. 1) in thesebuildings.

Furthermore, in some embodiments the analysis is performed by afinancial application that is executed by processing subsystem 210. Inparticular, the financial application may use the sensor data and/or theenvironmental condition for one or more of environments 112 (FIG. 1) todetermine a risk metric for a physical object associated with at leastthe environment associated with environmental monitoring device 200. Forexample, the physical object may be included in the environment or mayinclude the environment. In the latter case, the physical object mayinclude: a portion of a building (e.g., an apartment, a hotel room, anoffice suite, a storage unit, etc.), the building, a container (such asa box, a package or a shipping container), a vehicle (such as a car ortruck), a liquid, and/or a train car. Moreover, the risk metric may beused to calculate a financial value for the physical object, such as acommercial value or an insurance premium of the physical object.

In some embodiments, the one or more program modules 238 include adata-logging application. In conjunction with archive device 116 (FIGS.1 and 4), the data-logging application may maintain a secure, certifiedhistorical record or log for the environment and/or the physical object(such as a ‘housefax’ record for an apartment or a building). Notably,sensor subsystem 218 may securely communicate the sensor data toprocessing subsystem 210. Using optional secure channel 220, a digitalsignature for the sensor data may be generated, e.g., using a securehash function and/or an encryption key that are associated withenvironmental monitoring device 200 and/or optional secure channel 220.Then, the data-logging application may instruct networking subsystem 214to communicate a certified data package (with the sensor data oranalyzed sensor data, the digital signature, location information and/oran associated time stamp) to archive device 116 (FIG. 1) for inclusionin the historical record or log for the environment.

Additionally, in some embodiments the one or more program modules 238include a medical application. When executed by processing subsystem210, the medical application may modify an operating condition of aregulator device based on a medical condition of an individual. Forexample, environmental monitoring device 200 may, via networkingsubsystem 214, receive information (such as from another electronicdevice that stores a medical record of the individual) specifying themedical condition. This information may include: a diagnosis, details ofa prescription, medical care received by the individual, results oftesting (such as genetic testing), etc. The information may be encryptedor de-identified to protect the privacy of the individual. In theseembodiments, the individual may subsequently provide or allowenvironmental monitoring device 200 to receive an encryption key todecrypt the information, the individual may subsequently indicate thatthe information specifies their medical condition (such as usingoptional user-interface subsystem 216 or by using networking subsystem214 to communicate with environmental monitoring device 200 via anotherelectronic device used by the individual), and/or an association of theindividual with the information may be made by using networkingsubsystem 214 to access additional records stored on another electronicdevice (such as account information of the individual). Note that themedical condition may include: an allergy, a chemical sensitivity, anillness, and a chronic disease that is affected by the environmentalcondition, and/or an environmental preference of the individual based onthe medical condition.

Then, the medical application uses the information to determine a targetvalue of the environmental condition in the environment. If theenvironmental condition deviates from the target value (as determined bycomparing the sensor data and the target value), the medical applicationmay modify the operating condition of the regulator device (such as oneof electronic devices 114 in FIG. 1), which regulates the environmentalcondition in the environment. For example, the regulator device mayinclude: a thermostat, a humidifier, an air purifier, a ventilatordevice (such as a fan), a motor, a window opener, a door opener and/oran access-control device for the environment. The medical applicationmay instruct feedback subsystem 232 to present the modified operatingcondition to the user and/or may instruct networking subsystem 214 tocommunicate the modified operating condition to the regulator device (ifthe regulator device is capable of communicating with environmentalmonitoring device 200). Thus, the modified operation condition mayinclude a control signal for the regulator device.

In some embodiments, the medical application determines the target valuebased on other parameters, such as: the time of day, the season (i.e.,the time of year), and/or a forecast for the environmental condition(such as a weather or an allergen forecast) received from one or moreother electronic devices via networking subsystem 214.

Moreover, the one or more program modules 238 may include a data-sharingapplication. This data-sharing application may enable a designated orauthorized recipient to access protected sensor data that is stored inarchive device 116 (FIG. 1). In particular, when executed by processingsubsystem 210, the data-sharing application may instruct sensorsubsystem 218 to measure or collect sensor data that represents theenvironmental condition. Then, the data-sharing application may protectthe sensor data and/or analyzed sensor data. For example, the sensordata and/or the analyzed sensor data may be encrypted using anencryption key by processing subsystem 210 and/or optional securechannel 220. Alternatively or additionally, the sensor data and/or theanalyzed sensor data may be protected using a secure hash function inconjunction with an identifier of environmental monitoring device 200and/or a random number (or a pseudorandom number, both of which arehenceforth referred to as a ‘random number’) generated by processingsubsystem 210. Next, data-sharing application may instruct networkingsubsystem 214 to provide the protected sensor data and/or the analyzedsensor data to archive device 116 (FIG. 1).

Subsequently, when environmental monitoring device 200 receives, vianetworking subsystem 214, a request for the sensor data fromdata-sharing electronic device 118 (FIG. 1), the data-sharingapplication may access a predefined authorization preference of a userof environmental monitoring device 200 that is stored in memorysubsystem 212. If the predefined authorization preference of the userauthorizes the recipient associated with the request, the data-sharingapplication may provide, via networking subsystem 214, authorizationinformation to archive device 116 (FIG. 1) to release the sensor data todata-sharing electronic device 118 (FIG. 1). Alternatively, thedata-sharing application may instruct feedback subsystem 232 to requestfeedback about the request from the user. This user feedback may bereceived via optional user-interface subsystem 216. If the user feedbackapproves the request, the data-sharing application may provide, vianetworking subsystem 214, authorization information to archive device116 (FIG. 1) to release the sensor data to data-sharing electronicdevice 118 (FIG. 1). (Thus, the user of environmental monitoring device200 may control when other parties are allowed to access the sensordata.) Note that the data-sharing application may also provide, vianetworking subsystem 214, protection information specifying how tounprotect the sensor data to archive device 116 (FIG. 1) and/or todata-sharing electronic device 118 (FIG. 1). For example, thedata-sharing application may provide the encryption key and/or mayindicate the secure hash function, the random number and/or theidentifier. In some embodiments, this protection information is receivedfrom the user of environmental monitoring device 200, e.g., vianetworking interface 214 and/or optional user-interface subsystem 216.

In some embodiments, the one or more program modules 238 includes amaintenance application. This maintenance application may instructsensor subsystem 218 to measure the sensor data, which is associatedwith operation of one of electronic devices 114 (FIG. 1). Then, themaintenance application analyzes the sensor data and provides amaintenance notification related to the operation of the one ofelectronic devices 114 (FIG. 1) based on the analyzed sensor data. Forexample, the maintenance application may compare the sensor data to athreshold. If the threshold is exceeded, the maintenance application mayprovide the maintenance notification, such as an instruction to: changea filter, perform maintenance, replace a battery (and, more generally, apower source), replace a sensor, and/or order a replacement component(such as a sensor or a filter). When providing the maintenancenotification, the maintenance application may instruct feedbacksubsystem 232 to present the maintenance notification to the user ormaintenance personnel, and/or may instruct networking subsystem 214 tocommunicate the maintenance notification to the one of electronicdevices 114 in FIG. 1 (if this electronic device is capable ofcommunicating with environmental monitoring device 200). Furthermore,the maintenance application may also optionally provide a command, vianetworking subsystem 214, to an access-control device (such as a windowopener or a door opener) for the environment based on the maintenancenotification. Thus, if a fan is not working properly (as indicated by arising temperature or the environmental condition), the maintenanceapplication may alert the user or the maintenance personnel, and mayautomatically open one or more windows.

Within environmental monitoring device 200, processing subsystem 210,memory subsystem 212, networking subsystem 214, optional user-interfacesubsystem 216, sensor subsystem 218 and feedback subsystem 232 may becoupled using one or more interconnects, such as bus 230. Theseinterconnects may include an electrical, optical, and/or electro-opticalconnection that the subsystems can use to communicate commands and dataamong one another. Note that different embodiments can include adifferent number or configuration of electrical, optical, and/orelectro-optical connections among the subsystems. In some embodiments,environmental monitoring device 200 can detect tampering with securecomponents (such as optional secure channel 220 and/or bus 230) and maydestroy encryption/decryption keys or information (such as a storedsensor data or authentication information) if tampering is detected.

Environmental monitoring device 200 can be (or can be included in) anyelectronic device with at least one network interface. For example,environmental monitoring device 200 can be (or can be included in): asensor (such as a smart sensor), a tablet computer, a smartphone, acellular telephone, an appliance, a regulator device, aconsumer-electronic device, a portable computing device, test equipment,a digital signal processor, a controller, a personal digital assistant,a laser printer (or other office equipment such as a photocopier), apersonal organizer, a toy, a set-top box, a computing device (such as alaptop computer, a desktop computer, a server, and/or asubnotebook/netbook), a light (such as a nightlight), an alarm, a smokedetector, a monitoring device, and/or another electronic device.

Although specific components are used to describe environmentalmonitoring device 200, in alternative embodiments, different componentsand/or subsystems may be present in environmental monitoring device 200.For example, environmental monitoring device 200 may include one or moreadditional processing subsystems, memory subsystems, networkingsubsystems, user-interface subsystems, sensor subsystems, and/orfeedback subsystems. Additionally, one or more of the subsystems may notbe present in environmental monitoring device 200. Moreover, in someembodiments, environmental monitoring device 200 may include one or moreadditional subsystems that are not shown in FIG. 2. For example,environmental monitoring device 200 can include: one or more optionalspeakers 240 (and, more generally, a physiological output subsystem thatprovides sensory information to the user), a power source (such asbattery, or a DC power supply or a switched-mode power supply that maybe electrically coupled by an adaptor to a wall-socket plug, electricalwiring, a generator, a USB port, a photodiode, a photovoltaic cell,etc.), one or more motors that rotate one or more color wheels (orcolor-wheel indicators) with low power consumption (such as a brushedmotor, a brushless motor, a piezo-type ratcheting motor, etc.), and/oran alarm subsystem. Note that a given motor may rotate a color wheelusing an open-loop control technique or a closed-loop control techniquebased on an encoder, such as: an optical encoder, a mechanical encoder,a potentiometer, etc. Although separate subsystems are shown in FIG. 2,in some embodiments, some or all of a given subsystem or component canbe integrated into one or more of the other subsystems or components inenvironmental monitoring device 200. For example, in some embodimentsthe one or more program modules 238 are included in operating system236.

Moreover, the circuits and components in environmental monitoring device200 may be implemented using any combination of analog and/or digitalcircuitry, including: bipolar, PMOS and/or NMOS gates or transistors.Furthermore, signals in these embodiments may include digital signalsthat have approximately discrete values and/or analog signals that havecontinuous values. Additionally, components and circuits may besingle-ended or differential, and power supplies may be unipolar orbipolar.

An integrated circuit may implement some or all of the functionality ofnetworking subsystem 214 (such as a radio) and, more generally, some orall of the functionality of environmental monitoring device 200.Moreover, the integrated circuit may include hardware and/or softwaremechanisms that are used for transmitting wireless signals fromenvironmental monitoring device 200 to, and receiving signals atenvironmental monitoring device 200 from other electronic devices. Asidefrom the mechanisms herein described, radios are generally known in theart and hence are not described in detail. In general, networkingsubsystem 214 and/or the integrated circuit can include any number ofradios. Note that the radios in multiple-radio embodiments function in asimilar way to the radios described in single-radio embodiments.

In some embodiments, networking subsystem 214 and/or the integratedcircuit include a configuration mechanism (such as one or more hardwareand/or software mechanisms) that configures the radio(s) to transmitand/or receive on a given communication channel (e.g., a given carrierfrequency). For example, in some embodiments, the configurationmechanism can be used to switch the radio from monitoring and/ortransmitting on a given communication channel to monitoring and/ortransmitting on a different communication channel. (Note that‘monitoring’ as used herein comprises receiving signals from otherelectronic devices and possibly performing one or more processingoperations on the received signals, e.g., determining if the receivedsignal comprises an advertising frame, a petition, a beacon, etc.)

While a communication protocol compatible with ZigBee® was used as anillustrative example, the described embodiments of environmentalmonitoring device 200 may use a variety of network or communicationinterfaces. Furthermore, while some of the operations in the precedingembodiments were implemented in hardware or software, in general theoperations in the preceding embodiments can be implemented in a widevariety of configurations and architectures. Therefore, some or all ofthe operations in the preceding embodiments may be performed inhardware, in software or both.

Furthermore, while the preceding discussion focused on the hardware,software and functionality in environmental monitoring device 200,archive device 116 (FIG. 1) and/or optional computer 120 (FIG. 1) mayhave the same or similar hardware (processors, memory, networkinginterfaces, etc.) and/or software to support the operations performed bythese electronic devices or systems. This is shown in FIG. 4, whichpresents a block diagram illustrating electronic device 400, such asarchive device 116 (FIG. 1). In particular, electronic device 400includes processing subsystem 410, memory subsystem 412 and/or anetworking subsystem 414. Processing subsystem 410 includes one or moredevices configured to perform computational operations. For example,processing subsystem 410 can include one or more microprocessors,application-specific integrated circuits (ASCs), microcontrollers,programmable-logic devices, and/or one or more digital signal processors(DSPs).

Memory subsystem 412 includes one or more devices for storing dataand/or instructions for processing subsystem 410 and/or networkingsubsystem 414. For example, memory subsystem 412 can include dynamicrandom access memory (DRAM), static random access memory (SRAM), and/orother types of memory. In some embodiments, instructions for processingsubsystem 410 in memory subsystem 412 include: one or more programmodules 424 or sets of instructions (such as an archiving application,an analysis application, a data-sharing application and/or anotification application), which may be executed in an operatingenvironment (such as operating system 422) by processing subsystem 410.Note that the one or more computer programs may constitute acomputer-program mechanism or a program module. Moreover, instructionsin the various modules in memory subsystem 412 may be implemented in: ahigh-level procedural language, an object-oriented programming language,and/or in an assembly or machine language. Furthermore, the programminglanguage may be compiled or interpreted, e.g., configurable orconfigured (which may be used interchangeably in this discussion), to beexecuted by processing subsystem 410.

In addition, memory subsystem 412 can include mechanisms for controllingaccess to the memory. In some embodiments, memory subsystem 412 includesa memory hierarchy that comprises one or more caches coupled to a memoryin electronic device 400. In some of these embodiments, one or more ofthe caches is located in processing subsystem 410.

In some embodiments, memory subsystem 412 is coupled to one or morehigh-capacity mass-storage devices (not shown). For example, memorysubsystem 412 can be coupled to a magnetic or optical drive, asolid-state drive, or another type of mass-storage device. In theseembodiments, memory subsystem 412 can be used by electronic device 400as fast-access storage for often-used data, while the mass-storagedevice is used to store less frequently used data. Note that memorysubsystem 412 may include multiple storage devices at one or morelocations. Thus, data storage by memory subsystem 412 may bedistributed, such as a cloud-based data-storage system.

Networking subsystem 414 includes one or more devices configured tocouple to and communicate on a wired, optical and/or wireless network(i.e., to perform network operations), including an interface circuit416 and one or more optional antennas 418. For example, networkingsubsystem 414 can include: a ZigBee® networking subsystem, a Bluetooth™networking system (which can include Bluetooth™ Low Energy, BLE orBluetooth™ LE), a cellular networking system (e.g., a 5G/4G network suchas UMTS, LTE, etc.), a USB networking system, a networking system basedon the standards described in IEEE 802.11 (e.g., a Wi-Fi® networkingsystem), an Ethernet networking system and/or another communicationsystem.

Moreover, networking subsystem 414 includes processors, controllers,radios/antennas, sockets/plugs, and/or other devices used for couplingto, communicating on, and handling data and events for each supportednetworking or communication system. Note that mechanisms used forcoupling to, communicating on, and handling data and events on thenetwork for each network system are sometimes collectively referred toas a ‘network interface’ for the network system.

During operation of electronic device 400, processing subsystem 410 mayexecute one or more program modules 424, such as an archivingapplication. This archiving application may receive, via networkinginterface 414, data packets from one of more of environmental monitoringdevices 110 (FIG. 1). These data packets may include sensor data and/oranalyzed sensor data. In some embodiments, processing subsystem 410executes an analysis application, which analyzes the received sensordata.

Then, archiving application may store the sensor data and/or theanalyzed sensor data in a data structure in memory subsystem 412. Thisis shown in FIG. 5, which presents a block diagram illustrating datastructure 500. In particular, data structure 500 may include entries 508with: identifiers 510 of environmental monitoring devices, sensor data512, timestamps 514, locations 516, optional analyzed sensor data 518,environmental conditions 520 and/or optional protection information 522.

Referring back to FIG. 4, in some embodiments the received data packetsinclude protected information. For example, the sensor data and/or theanalyzed sensor data may be encrypted using an encryption key associatedwith one of environmental monitoring devices 110 (FIG. 1) and/or asecure channel in the one of environmental monitoring devices 110 (FIG.1). Alternatively or additionally, there may be a digital signatureassociated with the sensor data and/or the analyzed sensor data, and/orthe sensor data and/or the analyzed sensor data may be protected using asecure hash function. In these embodiments, optional protectioninformation 522 (FIG. 5) may include information that can confirm thesource(s) of the received data packets (such as one or more ofenvironmental monitoring devices 110 in FIG. 1) and/or can be used tounprotect the sensor data and/or the analyzed sensor data. Note thatoptional protection information 522 (FIG. 5) may be received, vianetworking interface 414, from one of environmental monitoring devices110 (FIG. 1). This protection information may include the encryption keyor an encryption key associated with the encryption key (which can beused to confirm the digital signature and/or decrypt encryptedinformation). Networking device 414 can utilize: encrypted tunneling inat least one networking interface, a network switch and/or networkrouter between one of environmental monitoring devices 110 and archivedevice 116 in FIG. 1. Similarly, optional protection information 522(FIG. 5) may specify the secure hash function, may include theidentifier for one of environmental monitoring devices 110 (FIG. 1)and/or may include the random number (which also can be used tounprotect information).

In an exemplary embodiment, a public-private encryption-key technique isused. In particular, a certified, secure data package may be signed byone of environmental monitoring devices 110 (FIG. 1) using a publicencryption key of archive device 116 (FIG. 1), and the digital signaturemay be verified and the certified, secure data package may be decryptedusing the private encryption key of archive device 116 (FIG. 1).However, in other embodiments a symmetric encryption technique is used.Thus, the same encryption key may be used to sign, encrypt and/ordecrypt the certified, secure data package.

In some embodiments, the one or more program modules 424 includes adata-sharing application. This data-sharing application may receive, vianetworking subsystem 414, authorization information for a recipient ofsensor data and/or analyzed sensor data. In response to theauthorization information, the data-sharing application may provide, vianetworking subsystem 414, the requested sensor data and/or analyzedsensor data to the recipient. Alternatively, the data-sharingapplication may provide, via networking subsystem 414, a pointer to alocation in memory subsystem 412 where the recipient can access therequested sensor data and/or analyzed sensor data. Note that thedata-sharing application may also optionally provide the optionalprotection information 522 (FIG. 5) to the recipient (which may allowthe recipient to confirm the source(s) and/or to unprotect protectedinformation).

Additionally, in some embodiments the one or more program modules 424includes a notification application. This notification application mayreceive, via networking subsystem 414, information, such as feedbackassociated with one or more environmental conditions in one or more ofenvironments 112 (FIG. 1) and/or a notification (such as a maintenancenotification). In response, the notification application maycommunicate, via networking subsystem 414, the information and/or one ormore reports based on the information (such as daily, weekly or monthlysummaries of analyzed sensor data, which may be included in documents orfiles) to: one or more of environmental monitoring devices 110 (FIG. 1),data-sharing electronic device 118 (FIG. 1) and/or other electronicdevices (such as computers or servers associated with or operated onbehalf of: component suppliers, retailers, insurance companies,maintenance organizations, shipping companies, landlords or propertyowners, a corporate-compliance organization, inspectors, businesses,government agencies, etc.). For example, the communication of theinformation may utilize a Short Message Service, email, a social networkand/or a message service with a restricted number of characters permessage. Alternatively, the information may be posted to a web page orwebsite (and, more generally, a location on a network), and one or morerecipients may be notified via networking subsystem 414, e.g., a link tothe location may be provided to the recipients.

When the notification includes a maintenance notification, the archivingapplication may store information specifying the maintenancenotification in a historical record or log for the environment. Inaddition, the archiving application may store any subsequent remedialaction (such as a repair or service performed on an electronic devicesin one of the environments) in a historical record or log for theenvironment in memory subsystem 412.

Within electronic device 400, processing subsystem 410, memory subsystem412, and/or networking subsystem 414 may be coupled using one or moreinterconnects, such as bus 420. These interconnects may include anelectrical, optical, and/or electro-optical connection that thesubsystems can use to communicate commands and data among one another.Note that different embodiments can include a different number orconfiguration of electrical, optical, and/or electro-optical connectionsamong the subsystems.

Electronic device 400 can be (or can be included in) any electronicdevice with at least one network interface. For example, electronicdevice 400 can be (or can be included in): a sensor (such as a smartsensor), a tablet computer, a smartphone, a cellular telephone, anappliance, a regulator device, a consumer-electronic device, a portablecomputing device, test equipment, a digital signal processor, acontroller, a personal digital assistant, a facsimile machine, a laserprinter (or other office equipment such as a photocopier), a personalorganizer, a toy, a set-top box, a computing device (such as a laptopcomputer, a desktop computer, a server, and/or a subnotebook/netbook),an alarm, a light, a monitoring device, and/or another electronicdevice.

Although specific components are used to describe electronic device 400,in alternative embodiments, different components and/or subsystems maybe present in electronic device 400. For example, electronic device 400may include one or more additional processing subsystems, memorysubsystems, and/or networking subsystems. Additionally, one or more ofthe subsystems may not be present in electronic device 400. Moreover, insome embodiments, electronic device 400 may include one or moreadditional subsystems that are not shown in FIG. 4, such as a powersupply and/or a user-interface subsystem (which a user may use to modifysettings of one or more of environmental monitoring devices 110 in FIG.1, such as settings for alarms or notifications). Although separatesubsystems are shown in FIG. 4, in some embodiments, some or all of agiven subsystem or component can be integrated into one or more of theother subsystems or components in electronic device 400. For example, insome embodiments the one or more program modules 424 are included inoperating system 422.

Moreover, the circuits and components in electronic device 400 may beimplemented using any combination of analog and/or digital circuitry,including: bipolar, PMOS and/or NMOS gates or transistors. Furthermore,signals in these embodiments may include digital signals that haveapproximately discrete values and/or analog signals that have continuousvalues. Additionally, components and circuits may be single-ended ordifferential, and power supplies may be unipolar or bipolar.

Note that an integrated circuit may implement some or all of thefunctionality of electronic device 400.

While some of the operations in the preceding embodiments wereimplemented in hardware or software, in general the operations in thepreceding embodiments can be implemented in a wide variety ofconfigurations and architectures. Therefore, some or all of theoperations in the preceding embodiments may be performed in hardware, insoftware or both.

An exemplary embodiment of the environmental monitoring device is shownin FIGS. 6-8, which respectively show front, side and rear views ofenvironmental monitoring device 600, which may be one of environmentalmonitoring devices 110 (FIG. 1). Alternatively, the environmentalmonitoring device may include a display. This shown in FIGS. 9 and 10,which respectively show front and side views of environmental monitoringdevice 900, which may be one of environmental monitoring devices 110(FIG. 1).

Embodiments of the environmental monitoring device may include a gratingin the chassis or housing that prevents large particles, soil and mudfrom damaging or otherwise obscuring inputs to one or more sensordevices in the environmental monitoring device. Alternatively oradditionally, the chassis or housing may facilitate airflow or fluidflow through vents or openings to one or more sensor devices in theenvironmental monitoring device. In addition, the environmentalmonitoring device may include a forced-fluid driver (such as a fan) tofacilitate airflow or fluid-flow through the vents. However, in otherembodiments airflow or fluid flow is facilitated using convection (e.g.,by heating the air or the fluid), or the airflow or fluid flow may occurpassively.

We now further describe operation of the environmental monitoring deviceand the archive device. FIG. 11 presents a flow diagram illustrating amethod 1100 for providing feedback, which may be performed by aprocessor in the environmental monitoring device. For example, theprocessor may execute a program module that includes instructions foroperations in method 1100. During operation, the processor may receive(or access) sensor data associated with a sensor (operation 1110) in theenvironmental monitoring device, where the sensor data is for anexternal environment that includes the environmental monitoring device.The sensor data represents an environmental condition that is associatedwith operation of a legacy electronic device in the externalenvironment, and the legacy electronic device is separate from theenvironmental monitoring device. Note that the sensor may provide thesensor data without or excluding communication and/or electricalcoupling between the environmental monitoring device and the legacyelectronic device.

Then, the processor may analyze the sensor data (operation 1112).

Next, the processor may provide the feedback (operation 1114) about theoperation of the legacy electronic device based on the analyzed sensordata. For example, the feedback may be provided on the environmentalmonitoring device and/or may be communicated to another electronicdevice, such as an aggregation electronic device or an archive device(which is other than the legacy electronic device).

Communication between environmental monitoring device 200 and archivedevice 116 during method 1100 (FIG. 11) is shown in FIG. 12. Inparticular, sensor subsystem 218 may provide sensor data to processingsubsystem 210. Then, processing subsystem 210 may analyze the sensordata, and may provide the feedback. For example, processing subsystem210 may provide information (such as the sensor data, analyzed sensordata and/or the feedback) to feedback subsystem 232 for presentation toa user. Alternatively or additionally, processing subsystem 210 mayprovide the information to networking subsystem 214. Next, networkingsubsystem 214 may communicate the information to electronic device 1210,such as archive device 116, data-sharing electronic device 118 oranother electronic device (not shown).

In an exemplary embodiment of method 1100 (FIG. 11), the environmentalmonitoring device may be used to monitor the quality of an environment.For example, a consumer may want the environmental monitoring device toprovide the feedback so that they know, at a glance, the quality oftheir environment (e.g., good air quality with low levels of organiccompounds and allergens). Alternatively, when there are potentiallyharmful chemicals or allergens present (such as a chemical concentrationexceeding safe limits), the consumer may want the environmentalmonitoring device to provide the feedback so that they know there is anissue that needs to be addressed. In contrast, an industrial user maywant the ability to visualize the sensor data and/or one or moreenvironmental conditions, and may want the ability to archive the sensordata and/or the one or more environmental conditions in an archivedevice.

Using the chemical concentration as an illustrative example, one or moresensors or sensor devices in the environmental monitoring device mayoutput a signal (which is one form of the feedback) in response to thepresence of a concentration or level of the chemical level in the air.The processing subsystem and/or signal-conditioning circuits in theenvironmental monitoring device may analyze this sensor data, identifythe environmental condition and may provide signals to a display in theenvironmental monitoring device.

Alternatively or additionally, the processing subsystem and/or thesignal-conditioning circuits may sound a ‘danger’ alarm or audio messageby providing signals (which are another form of the feedback) to one ormore speakers (or audio transducers) in the environmental monitoringdevice. This danger alarm may occur even if the display is not currentlyworking. In addition, the environmental monitoring device maycommunicate an alert (which is another form of the feedback) about theenvironmental condition to a monitoring station, which may contactsomeone associated with the environment (such as the user), who caninvestigate the environmental condition, evacuate the environment and/orcontact a chemical response team.

In another illustrative example, the one or more sensor devices maydetect air particles (such as dust, dander and other allergens) and maysend an alert or notification (which is a form of the feedback), such asan alarm or an audio message, to a user, a person or an electronicdevice (such as a regulator device) in the environment with instructionsto: ventilate the area, turn on a filtration system, run a humidifier,and/or another environmental clearing actions. Thus, the feedback mayinclude one or more recommended remedial actions to address theenvironmental condition. Note that the remedial actions may includepositive instructions (such as ‘turn on the ventilation’) and/ornegative instructions (i.e., things not to do if certain actions arelikely to make the environmental condition worse). For example, theremedial actions may include suggested safety tips and precautions, suchas advising: a human to wear a mask while vacuuming in an environmentwith dangerous levels of dust; a human or a machine to ventilate anarea; that the rate of application of a chemical product (such as paintor varnish) be reduced; and/or the use of personal protection equipment(such as a filtration mask or a self-contained breathing apparatus).

In other examples, the environmental condition may include when water isboiling on a stove, when food is overcooked or burning in a kitchen. Forexample, the environmental monitoring device may receive an acousticsignal indicating a timer has gone off on the oven or an appliance (suchas a dryer). Similarly, an acoustic signal (and/or video) may detect thepresence of a leaking faucet or pipe. In some embodiments, theenvironmental condition is the presence of a weather condition (such asa tornado) and the feedback includes instructions to a user to seekshelter and control signals to a regulator device to open or break thewindows in a building to help equalize air-pressure differences.Additionally, the environmental condition includes when a user is athome, and the feedback may modify the environment in the homeaccordingly (such as turning on one or more lights, turning on the heator the air conditioning, etc.). This last example may be facilitated byfeed-forward information that is received by the environmentalmonitoring system from another electronic device. This feed-forwardinformation may indicate that the user is heading home.

Note that the environmental monitoring device may provide differentalerts for different environmental conditions and these alerts can beprovided concurrently. Moreover, the alerts may be associated withdifferent: sounds, lights, messages and/or notification techniques. Forexample, a smoke-detection sound may be different from a sound playedwhen a dangerous level of dust is detected or when food is ready. Inparticular, a hex texture or pattern may be displayed on theenvironmental monitoring device when benzene is detected. As the levelsincrease the hex pattern can change in size, scale, luminosity, pitch,color, dimension, perspective (such as by converting from twodimensional to three dimensional), orientation or another sensoryparameter. Furthermore, the color of the display can change (either thebackground color or the foreground color) in response to changes in theone or more environmental conditions. For example, as the level ofdetected benzene increases on an absolute scale, the colors may changefrom a light green to yellow, then to orange, and then to red (with redindicating a harmful level of benzene present in the air). The tint,saturation, hue, contrast, brightness, transparency, and fade of thecolors on the display may also be increased or decreased, therebyintuitively conveying the environmental condition.

As shown in FIG. 9, in some embodiments the environmental monitoringdevice displays a graphic (such as: a pie chart, a bar chart, a scatterplot, a time-series plot, a tabular summary, a spectrum, a spectrogramand/or another type of graphical analysis) to provide the user withinformation about the one or more environmental conditions.Alternatively or additionally, the graphic may include images ofchemicals, along with color scales or numbers. The image of a givenchemical can grow or shrink in size in proportion to the chemical levelsor concentrations detected. Furthermore, the feedback may include agraph that includes an anonymous comparison of an environmentalcondition with neighbors or similar classes of users to enable a user tocompare the environment that includes the environmental monitoringdevice with comparable environments. These comparisons may offerinformation about relative health or safety of the environment, and/ormay be of general interest.

In some embodiments, the feedback is provided via a color-wheelindicator that is rotated by a motor based on a signal that indicatesthe strength of an environmental condition or using a color-wheelgraphic. For example, an indicator or a marker aligned with thecolor-wheel indicator may indicate which area in the color wheelcorresponds to the current environmental condition. Alternatively, asshown in FIG. 6, a color-wheel indicator may include a rotatable orselectively illuminated ring (which is sometimes referred to as a ‘colorring’) with a band of color or shades of grayscale on the outside of thecolor wheel so that a user can identity the approximate level ofenvironmental condition based on the color(s) or grayscale valuesdisplayed on the ring. In another display option, the color-wheelindicator may include a color or texture-based gauge. Furthermore, theenvironmental monitoring device may include multiple color-wheelindicators in the feedback subsystem that can be used together todisplay additional information, or to provide additional resolutionand/or precision to the feedback. In an exemplary embodiment, atransparent color wheel with additional colors may be rotated (possiblyat a different angular velocity from other color wheels) to modify thecolors presented. Similarly, shades of gray or transparent gradients ofincreasing opacity of red, green, and/or blue (or cyan, magenta, and/oryellow) may be used around the ring of a given color wheel.

The display in the feedback subsystem may include a user-interfaceobject such as an icon (and, more generally, a selection mechanism) thatallows the user to select the type of feedback. For example, a selectionbox or a slider bar may allow the user to select options or settingssuch as: basic, intermediate or advanced feedback (depending on thetechnical level of the user or the application of the environmentalmonitoring device). The user may also use a user interface in theenvironmental monitoring device and/or the display to select feedbackand notification options or settings, such as: danger alarms and alerts,threshold levels for detecting environmental conditions, optimalsettings for a particular environmental monitoring device or environment(such as calibration settings, power-consumption settings, etc.) or ageneric environmental monitoring device or environment, etc.Alternatively, the thresholds may be determined based on sensor dataand/or environmental conditions associated with multiple environmentalmonitoring devices, e.g., using a supervised learning technique (such assupport vector machines, classification and regression trees, a neuralnetwork, regression analysis, Bayesian analysis, etc.). Note that theenvironmental monitoring device may also display operating information,such as: sensor life, uptime, battery life remaining, networkconnectivity, danger alarms enabled or disabled, and/or status messages.

While the preceding discussion illustrated display of the feedback onthe environmental monitoring device, in other embodiments the feedbackis provided to another electronic device (such as the user's cellulartelephone). This capability enables remote monitoring of theenvironment, such as while the user runs errands or is travelling.

FIG. 13 presents a flow diagram illustrating a method 1300 fordetermining a risk metric, which may be performed by a processor in anelectronic device (such as the environmental monitoring device or thearchive device). For example, the processor may execute a program modulethat includes instructions for operations in method 1300. Duringoperation, the processor may receive (or access) sensor data from a setof electronic devices (operation 1310), where the sensor data representsenvironmental conditions in external environments of the set ofelectronic devices, and where the set of electronic devices at leastincludes electronic devices other than the electronic device (and mayoptionally include the electronic device). (At the minimum, the set ofelectronic devices includes at least one electronic device.) The set ofelectronic devices may be located in separate external environments,such as different apartments in a building or different houses in aneighborhood. Consequently, the external environments may be associatedwith different entities, such as the different occupants of theapartments or the different owners of the houses. Note that, in order tomaintain user control over the sensor data from the externalenvironments, the users may have to choose to opt in or grantauthorization before their sensor data is used to determine the riskmetric.

Then, the processor may analyze the sensor data (operation 1312), wherethe analysis involves comparing the sensor data from a given electronicdevice in the set of electronic devices with the sensor data from aremainder of the set of electronic devices. More generally, theprocessor may analyze the sensor data from at least one electronicdevice, such as at least one environmental monitoring device.

Next, the processor may determine the risk metric for the externalenvironment (operation 1314) associated with the given electronic devicebased on the analyzed sensor data.

Furthermore, the processor may optionally calculate a financial valueassociated with a physical object (operation 1316) based on thedetermined risk metric. In particular, the external environment may beincluded in the physical object or the physical object may be includedin the external environment. For example, the financial value mayinclude: a commercial value of the physical object (such as a rentalprice, a resale value, a quality classification for use a tiered-pricingtechnique, a discount to apply to a damaged, a discount to apply to animproperly stored or handled item, etc.); and/or an insurance premiumrelating to the physical object or an insurance premium for the use of aphysical object in the environment (such as liability insurance).

FIG. 14 presents a drawing illustrating communication between anelectronic device and a set of electronic devices during method 1300(FIG. 13). In the following discussion, environmental monitoring device200 is used as an illustrative example. In particular, networkingsubsystem 214 may receive the sensor data for set of electronic devices1410 (such as environmental monitoring devices in the externalenvironments), and may provide the sensor data to processing subsystem210. Then, processing subsystem 210 may perform one or morecomputations, such as: analyzing the sensor data, determining the riskmetric and/or calculating the financial value. Next, processingsubsystem 210 may provide information (such as the risk metric and/orthe financial value) to networking subsystem 214 for communication toone or more electronic devices 1412, such as: the user of one ofenvironmental monitoring devices 110 (FIG. 1), data-sharing electronicdevice 118 (FIG. 1), and/or one or more computers associated with oroperated on behalf of other parties or entities than the user.

In an exemplary embodiment of method 1300 (FIG. 13), the electronicdevice generates an environmental quality rating for the physical objectand/or the environment (which is an example of the risk metric) as afunction of time. More generally, the electronic device can generate anenvironmental quality report for the environment.

Then, the electronic device calculates the financial value for thephysical object (such as a premium estimate for a residential orcommercial property) based on the environmental quality. In this way,the sensor data and/or one or more environmental conditions can be usedto assess the financial impact of: occupancy of a building or hotel(e.g., by detecting the presence of individuals), how environmentallyfriendly the building is (e.g., relative power consumption), a so-called‘sick building,’ and/or infestation (which may be detected chemically,by the sounds, movements and/or vibrations made by insects or rodents,using video, etc.).

For example, the electronic device may assign a commercial value to realestate, antiques and/or perishable goods, which may derive value fromthe quality of their environments. In particular, the qualities of air,water, cleanliness, etc. have an impact on real-estate values. Averifiable environmental quality report for a property showingexcellent, neutral or poor environmental quality can have a directeffect on the price of both residential and commercial real estate, aswell as rental, leasing and hospitality rates. It may be advantageousfor a real-estate owner or seller to demonstrate the environmentalquality of their properties. The electronic device may assign afinancial premium estimate for a good environmental score, and afinancial penalty estimate for a low or non-existent environmentalscore, thereby allowing buyers and sellers to properly value property inmany different transactions and environments.

Similarly, perishable goods can be damaged or spoiled if not storedproperly. Indeed, many food products (such as grains, eggs, meat, fish,seafood, dairy products, and produce) are sensitive to environmentalconditions and may cause illness if consumed after improper handling orstorage. The electronic device may verify that perishable products werestored in proper environments, which may allow these products to be soldat a premium relative to other products that lack such verifiedenvironmental quality. For example, Kobe beef stored in optimalconditions may be certified as premium stored, and may be sold for ahigher premium depending on the quality of the environment. Thus, theelectronic device may use the sensor data to differentiate quality.

Furthermore, many valuable documents or antiques require specificenvironments to ensure they maintain their condition and value. Anantique that has been stored in an optimal environment can be expectedto sell for a premium. This may be assessed using the electronic device.

In other examples, the electronic device may use sensor data from one ormore environmental monitoring devices to assess the environmentalquality of: a chemical, water, food, medicines (such as those that needto be maintained at certain temperatures), biological agents, packagesor shipping containers (which may be sensitive to vibration or shock),etc.

This environmental quality rating and/or the financial value may beshared with the user and/or other parties (e.g., as a subscriptionservice to realtors, insurance companies, the government, etc.). Forexample a butcher may share a report on the quality of the environmentin their meat locker, and may be able to demonstrate the superiorquality of their meats. Similarly, a homeowner could report theexcellent air quality in their basement to prospective buyers, acommercial landlord may provide favorable reports with both prospectiveand current tenants, and/or a hotel could share environmental qualityreports with guests. Alternatively, a restaurant may share theenvironmental quality of their kitchen with patrons or prospectivepatrons.

Using the electronic device, regulated industries (such as foodproduction, pharmaceutical production, healthcare, energy, utilities,chemical production, paper mills, steel mills, etc.) may be monitoredfor environmental quality compliance and/or safety compliance byregulators, compliance monitors and/or an insurance company assessor.Alternatively, compliance data may be aggregated for subsequent use. Ingeneral, the sharing of the environmental quality rating may bevoluntary (i.e., the user may opt in) unless required by law orcontract.

Revenue and/or cost savings that result from method 1300 (FIG. 13) maybe shared, directly or indirectly, with the user. For example, the usermay receive an insurance discount or a tax credit based on theenvironmental quality rating. Alternatively or additionally, a providerof the environmental monitoring device may provide a financial incentiveto the user to encourage the user to share the sensor data. In addition,an individual or an organization may receive special certifications fromthe government, an insurance company and/or another overseeingcompliance group. The information provided by the electronic device mayalso enable insurance companies and regulators to set environmentalquality levels using data-driven techniques.

FIG. 15 presents a flow diagram illustrating a method 1500 for providinga certified data package, which may be performed by a secure channel ina processor in the environmental monitoring device. For example, theprocessor may execute a program module that includes instructions foroperations in method 1500. During operation, the processor may receive(or access) sensor data from a sensor (operation 1510) in theenvironmental monitoring device, where the sensor data represents anenvironmental condition in an external environment that includes theenvironmental monitoring device.

Then, the processor may optionally analyze the sensor data (operation1512). As described previously with reference to FIGS. 13 and 14, theexternal environment may be associated with a physical object, andanalyzing the sensor data may involve calculating a risk metric for theexternal environment and/or a financial value associated with thephysical object that is based on the determined risk metric. Thisfinancial value may include: a commercial value of the physical object;and/or an insurance premium for the physical object.

Moreover, the processor may optionally receive location information(operation 1514) that specifies a location were the sensor data wasacquired or measured. For example, the location information may bemeasured using a sensor device in the environmental monitoring device(such as a location monitor) and/or the location information may bereceived from another electronic device that is proximate to theenvironmental monitoring device (such as an individual's cellulartelephone). Thus, the location may be determined via GPS and/or acellular-telephone network (such as triangulation or trilateration).

Next, the processor may generate a digital signature associated with thesecure channel (operation 1516), where the secure channel processesinformation and communicates the processed information using anencryption key associated with the secure channel. For example, thedigital signature may be generated using an encryption key, such as anencryption key associated with the user of the environmental monitoringdevice and/or the secure channel. Alternatively or additionally, thedigital signature may be generated using a secure hash of a time stamp(or a random number) and an identifier of the environmental monitoringdevice.

Furthermore, the processor may provide, to the archive device, thecertified data package (operation 1518) for archiving in a historicalrecord for the external environment, where the certified data packageincludes the sensor data, the optional analyzed sensor data, the digitalsignature, the time stamp and optional location information (whichspecifies a location where the sensor data were acquired).

FIG. 16 presents a drawing illustrating communication between anenvironmental monitoring device and an archive device during method 1500(FIG. 15). In particular, sensor subsystem 218 may provide the sensordata to processing subsystem 210. Then, processing subsystem 210 mayoptionally analyze the sensor data. Moreover, networking subsystem 214may optionally receive the location information, which is provided toprocessing subsystem 210 by another electronic device 1610 (such as GPSsystem or a cellular telephone or an individual proximate toenvironmental monitoring device 200) via networking subsystem 214. Next,processing subsystem 210 may determine the digital signature.Furthermore, processing subsystem 210 may provide the certified datapackage to networking subsystem 214, which communicates the certifieddata package to archive device 116.

In an exemplary embodiment of method 1500 (FIG. 15), two or more datapoints in a time series can be used as part of a historical record orlog for the environment (such as a certified environmental report for ahouse or building that provides a history of maintenance andenvironmental conditions or quality of the house or building tointerested parties, such as prospective buyers). If the sensor dataincludes acceleration and/or location information, the environmentalquality report for a building or property can be invalidated based ondetected movement of an environmental monitoring device. This historicalrecord may be used to determine a risk metric and/or a financial valuefor the environment and/or the physical object (as described previouslywith reference to FIGS. 13 and 14). In another exemplary embodiment, ahomeowner with a poor environmental record has contractors repair aproblem with their environment, and the repair or maintenanceservice-record information may be noted securely in the historicalrecord for the environment. Furthermore, subsequent improvements in theenvironmental quality can be noted along with the maintenance servicerecords. This capability may allow a homeowner (in this example) toimprove the quality of their environment in order to: lower theirinsurance premiums, increase the resale value, generate a return oninvestment/improvement of the property, and/or qualitatively orquantitatively improve their living environment. Note that thiscapability may be applied to commercial, hospitality, dining, storage,shipping and many other industries and/or environments.

FIG. 17 presents a flow diagram illustrating a method 1700 for modifyingan operating condition, which may be performed by a processor in anelectronic device, such as the environmental monitoring device oranother electronic device. For example, the processor may execute aprogram module that includes instructions for operations in method 1700.During operation, the processor may receive (or access) information(operation 1710), such as that specifying a medical condition of anindividual. This information may be received from another electronicdevice, such as one that maintains health records of the individualand/or from an electronic device associated with the individual (such asthe individual's cellular telephone). In addition, the information mayinclude a forecast for an environmental condition (such as a weather orallergen forecast), which may be received from one or more otherelectronic devices (such as a computer or server) that are, in general,different from the electronic device that provides the informationspecifying the medical condition.

Note that the medical condition may include: an allergy, a chemicalsensitivity, an illness, and/or a chronic disease that is affected bythe environmental condition. More generally, the medical condition caninclude a user health preference. This health preference may betangentially related to health or may provide some sort of placeboeffect, e.g., turning up the thermostat when the individual is getting acold. While this operating condition may or may not have an impact onthe individual's health, it may have a psychological impact in helpingthe individual deal with the cold.

Then, the processor may determine a target value of an environmentalcondition (operation 1712) in an external environment of the electronicdevice based on the information specifying the medical condition. Forexample, medical knowledge may be accessed to determine healthconstraints or symptoms associated with the medical condition that maybe alleviated or mitigated based on the target value. In addition, thetarget value may also be based on the forecast and % or a time (such asthe time of day or the time of year, e.g., a season).

Moreover, the processor may calculate a deviation from the target value(operation 1714) based on sensor data and the target value, where thesensor data is provided by a sensor in the electronic device, and thesensor data represents the environmental condition. Note that thedeviation may be an absolute difference or a relative value (such as apercentage).

Next, the electronic device may modify the operating condition(operation 1718) of a regulator device in the external environment ifthe deviation exceeds a threshold (operation 1716), wherein theregulator device regulates the environmental condition. For example, ifa magnitude of the deviation exceeds the threshold (such as 5, 10 or25%), the operating condition may be modified. More generally, theoperating condition may be modified based on an absolute or a relative(such as a percentage) deviation. Otherwise, the operating condition maybe unchanged (operation 1716).

Furthermore, the processor may provide the modified operating condition(operation 1720). For example, the modified operating condition may beprovided to a user of one of environmental monitoring devices 110(FIG. 1) and/or may be communicated to the regulator device (such as oneof electronic devices 114 in FIG. 1).

In some embodiments, modifying the operating condition helps theindividual manage a handicap. For example, it may make the environmentmore accessible to individuals with handicaps. Additionally, note thatthe information specifying the medical condition may be encrypted and/orde-identified in order to protect the identity of the individual. Inthese embodiments, the processor may receive an encryption key and maydecrypt the information, and/or the processor may receive informationspecifying the identity of the individual. This latter information maybe received separately from the information specifying the medicalcondition and/or from a different source than the other electronicdevice that provided the information specifying the medical condition.

FIG. 18 presents a drawing illustrating communication between anelectronic device, a regulator device and/or another electronic deviceduring method 1700 (FIG. 17). In the following discussion, environmentalmonitoring device 200 is used as an illustrative example. In particular,electronic device 1810 (such as a medical record computer) may providethe information specifying the medical condition to networking subsystem214, which is provided to processing subsystem 210. Then, processingsubsystem 210 may determine the target value. Moreover, sensor subsystem218 may provide the sensor data to processing subsystem 210. Next,processing subsystem 210 may compare the sensor data and the targetvalue. If the deviation from the target value exceeds the threshold,processing subsystem 210 may modify the operating condition. Thismodified operating condition may be provided to networking subsystem 214for communication to regulator device 1812 or another electronic device1814 of the user (such as the user's cellular telephone, tablet computeror computer), and/or may be provided to the user via feedback subsystem232.

In an exemplary embodiment of method 1700 (FIG. 17), the individual mayhave an allergy to pollen. The electronic device may determine a targetconcentration of the allergen (or a setting of an air filter). Moreover,the electronic device may monitor the environmental condition (such asthe concentration of the allergen). If the environmental conditionexceeds the target concentration, the electronic device may: increaseair flow through an air filter (or may instruct an individual toincrease the air flow if the air filter is a legacy electronic device).Depending on the time of year (pollen counts may be higher at certaintimes of the year) and/or an allergen forecast, the electronic devicemay modify the target concentration and/or may take other remedialaction (such as closing the windows to a home or instructing theindividual to close the windows).

FIG. 19 presents a flow diagram illustrating a method 1900 forauthorizing access to sensor data, which may be performed by a processorin the environmental monitoring device. For example, the processor mayexecute a program module that includes instructions for operations inmethod 1900. During operation, the processor may receive (or access) thesensor data from a sensor (operation 1910) in the environmentalmonitoring device, where the sensor data represents an environmentalcondition in an external environment that includes the environmentalmonitoring device.

Then, the processor may protect the sensor data (operation 1912). Forexample, the sensor data may be protected by hashing (using a securehash function) the sensor data, a random number generated by theenvironmental monitoring device and an identifier of the environmentalmonitoring device. In some embodiments, the environmental monitoringdevice may store a set of secure hash functions that includes the securehash function, and the secure hash function currently being used may bespecified by a protection preference. In these embodiments, theprotection preference may be received from the archive device.Alternatively, the same secure hash function may be used and theidentifier of the environmental monitoring device may be dynamicallyupdated, e.g., by the archive device.

Moreover, the processor may provide the protected sensor data to anarchive device (operation 1914).

Next, the processor may receive a request for the sensor data (operation1916) from another electronic device.

Furthermore, the processor may provide authorization information to thearchive device to release the sensor data to the other electronic device(operation 1920). This authorization information may be provided basedon a predefined authorization preference of a user associated with theenvironmental monitoring device (e.g., the recipient may have beenpreviously specified and approved by the user). Alternatively, in someembodiments, the processor optionally requests and optionally receivesuser feedback about the request (operation 1918). In these embodiments,the authorization information is provided if the user feedback includesapproval of the request. Note that the request may include an address ofa recipient of the requested sensor data (such as a media access controladdress), and this address may be provided to the archive device in oralong with the authorization information.

Additionally, the processor may optionally provide unprotect information(operation 1922), where the unprotect information indicate how tounprotect the protected sensor data. For example, the unprotectinformation may be provided to the archive device and/or to a recipientof the requested sensor data (who provided the request).

FIG. 20 presents a drawing illustrating communication between anenvironmental monitoring device, an archive device and anotherelectronic device during method 1900 (FIG. 19). In particular, sensorsubsystem 218 may provide the sensor data to processing subsystem 210.Then, processing subsystem 210 may protect the sensor data. Moreover,processing subsystem 210 may provide the protected sensor data tonetworking subsystem 214, which communicates the certified data packageto archive device 116. Next, networking subsystem 214 may receive therequest for stored data from an electronic device 2010 (which isassociated with the requestor), which is provided to processingsubsystem 210. Processing subsystem 210 may either access the predefinedauthorization preference stored in memory subsystem 212 or may requestthe user feedback via feedback subsystem 232. Based on the predefinedauthorization preference or the user feedback received via optionaluser-interface subsystem 216 (for visual simplicity, the user feedbackis provided to processing subsystem 210 by feedback subsystem 232 inFIG. 20), processing subsystem 210 may selectively provide theauthorization information to networking subsystem 214 for communicationto archive device 116. Furthermore, archive device may provide therequested data (which may be protected or unprotected) to electronicdevice 2010 based on the authorization information.

Method 1900 (FIG. 19) may provide the advantages of remote securestorage while allowing selective access to stored information bydesignated or approved recipients. In these ways, the user of theenvironmental monitoring device may maintain control over how their datais used and when it is released to third parties.

FIG. 21 presents a flow diagram illustrating a method 2100 for providinga maintenance notification, which may be performed by a processor in theenvironmental monitoring device. For example, the processor may executea program module that includes instructions for operations in method2100. During operation, the processor may receive (or access) sensordata (operation 2110) associated with a sensor in the environmentalmonitoring device, where the sensor data is for an external environmentthat includes the environmental monitoring device, and the sensor datarepresents an environmental condition that is associated with operationof an electronic device in the external environment. Note that thesensor may provide the sensor data without or excluding communicationand/or electrical coupling between the environmental monitoring deviceand the legacy electronic device.

Then, the processor may analyze the sensor data (operation 2112). Forexample, analyzing the sensor data may involve comparing the sensor datato a threshold value, such as a maximum or minimum value of theenvironmental condition.

Moreover, the processor may provide the maintenance notification(operation 2114) related to the operation of the electronic device basedon the analyzed sensor data. For example, the maintenance notificationmay include an instruction to: take out the garbage (which may bedetermined based on the presence of a chemical or a certainconcentration of the chemical), open a window, change a filter, performmaintenance on the electronic device, replace a power source in theelectronic device (such as a battery), calibrate a sensor, and/orreplace a sensor (or a component) in the electronic device. Note thatthe maintenance notification may be provided to a third party (such as amaid or a janitor) that performs maintenance on the electronic device.Thus, the maintenance notification may be provided to an electronicdevice associated with the third party, such as a cellular telephone.The third party may be other than a user associated with theenvironmental monitoring device and a provider of the environmentalmonitoring device. In this way, method 2100 may allow automation ofmaintenance tasks. Furthermore, regular maintenance notifications thatare serviced may be securely recorded and maintained as part of theservice or historical records for the environment, which can have apositive effect on the value of: a building, a portion of a building, ashipping container, a shipping service, etc.

Additionally, the processor may perform a remedial action related to themaintenance notification (operation 21116). For example, a replacementcomponent for the electronic device may be ordered based on themaintenance notification. This remedial action may be part of asubscription service for spare parts for the electronic device. If thecomponent identifier is unknown, an image of the component may be usedto identify it (e.g., using an image recognition technique).Alternatively or additionally, the processor may alert maintenance staffor a recycling organization that the previous component needs to berecycled. In some embodiments, the remedial action includes providing acommand to an access-control device for the external environment basedon the maintenance notification. Thus, the command may instruct a motorto open windows on one side of a house based on the prevailing windconditions when the air conditioning is not working properly. Inaddition, the processor may provide information specifying themaintenance notification and/or any subsequent remedial action (such asa service or repair performed on the electronic device) performed inresponse to the maintenance notification to an archive device thatmaintains a historical record for the environment. Thus, remedialactions such as ordering new air filters, getting a contractor to fix aheating and air-conditioning system, installing ventilation to removeradon from a basement of a house, etc. may be stored in historicalrecords.

FIG. 22 presents a drawing illustrating communication between anenvironmental monitoring device and another electronic device duringmethod 2100 (FIG. 21). In particular, sensor subsystem 218 may providethe sensor data to processing subsystem 210. Then, processing subsystem210 may analyze the sensor data. Moreover, processing subsystem 210 mayprovide the maintenance notification based on the analyzed sensor data.For example, the maintenance notification may be provided to networkingsubsystem 214 for communication to one of electronic devices 114 in FIG.1 (such as regulator device 2210) or another electronic device 2212 ofthe third party (such as the third party's cellular telephone, tabletcomputer or computer), and/or may be provided to the user via feedbacksubsystem 232. Furthermore, processing subsystem 110 may perform theremedial action, such as by providing an order for the replacementcomponent to networking subsystem 214 for communication to componentsupplier 2214 (or a computer associated with or operated on behalf ofcomponent supplier 2214). While not shown in FIG. 22, in someembodiments processing subsystem 210 provides information specifying themaintenance notification and/or any subsequent remedial action (such asa repair or service performed on regulator device 2210) performed inresponse to the maintenance notification to networking subsystem 214 forcommunication to an archive device (such as archive device 116 inFIG. 1) that maintains a historical record for the environment.

In an exemplary embodiment of method 2100 (FIG. 19), the sensor data maymonitor performance of an air filter. If the sensor data indicate thatthe concentration of dust or the mean dust-particle size exceeds atarget value corresponding to a safe or health environment, themaintenance notification may indicate a need to change the filter in theair filter. The environmental monitoring device may provide themaintenance notification to a maintenance worker. In addition, theenvironmental monitoring device may order a replacement filter from asupplier. This capability of automating basic maintenance on the airfilter (and, more generally, for an electronic device or a regulatordevice that helps maintain the environmental condition) may be offeredas a subscription service. (Similarly, one or more other functions ofthe environmental monitoring device and/or the archive device may beoffered for a one-time fee or as a subscription service to the user ofthe environmental monitoring device and/or a third party.)

In some embodiments of one or more of the preceding methods, there maybe additional or fewer operations. Furthermore, the order of theoperations may be changed, and/or two or more operations may be combinedinto a single operation.

In the preceding description, we refer to ‘some embodiments.’ Note that‘some embodiments’ describes a subset of all of the possibleembodiments, but does not always specify the same subset of embodiments.

The foregoing description is intended to enable any person skilled inthe art to make and use the disclosure, and is provided in the contextof a particular application and its requirements. Moreover, theforegoing descriptions of embodiments of the present disclosure havebeen presented for purposes of illustration and description only. Theyare not intended to be exhaustive or to limit the present disclosure tothe forms disclosed. Accordingly, many modifications and variations willbe apparent to practitioners skilled in the art, and the generalprinciples defined herein may be applied to other embodiments andapplications without departing from the spirit and scope of the presentdisclosure. Additionally, the discussion of the preceding embodiments isnot intended to limit the present disclosure. Thus, the presentdisclosure is not intended to be limited to the embodiments shown, butis to be accorded the widest scope consistent with the principles andfeatures disclosed herein.

What is claimed is:
 1. An environmental monitoring device, comprising: asensor configured to provide sensor data that represents anenvironmental condition in an external environment that includes theenvironmental monitoring device; an antenna; an interface circuit,coupled to the antenna, configured to communicate with an archive deviceand another electronic device; a processor; and a memory, coupled to theprocessor, which stores a program module configured to be executed bythe processor, the program module including: instructions for receivingthe sensor data from the sensor; instructions for protecting the sensordata; instructions for providing the protected sensor data to thearchive device; instructions for receiving a request for the sensor datafrom the other electronic device; and instructions for providingauthorization information to the archive device to release the sensordata to the other electronic device.
 2. The environmental monitoringdevice of claim 1, wherein the authorization information is based on apredefined authorization preference of a user associated with theenvironmental monitoring device.
 3. The environmental monitoring deviceof claim 1, wherein the program module further includes: instructionsfor requesting user feedback about the request; and instructions forreceiving the user feedback, wherein the authorization information isprovided if the user feedback includes approval of the request.
 4. Theenvironmental monitoring device of claim 1, wherein protecting thesensor data involves hashing, using a secure hash function, the sensordata, a random number generated by the environmental monitoring deviceand an identifier of the environmental monitoring device.
 5. Theenvironmental monitoring device of claim 4, wherein the memory stores aset of secure hash functions that includes the secure hash function;wherein the secure hash function is specified by a protectionpreference; and wherein the program module further includes instructionsfor receiving the protection preference from the archive device.
 6. Theenvironmental monitoring device of claim 1, wherein the program modulefurther includes instructions for communicating, to the archive device,information specifying how to unprotect the sensor data.
 7. Theenvironmental monitoring device of claim 1, wherein the program modulefurther includes instructions for communicating, to the other electronicdevice, information specifying how to unprotect the sensor data.
 8. Theenvironmental monitoring device of claim 1, wherein the request includesan address of the other electronic device; and wherein the authorizationinformation includes the address.
 9. A computer-program product for usein conjunction with a processor in an environmental monitoring device,the computer-program product comprising a non-transitorycomputer-readable storage medium and a computer-program mechanismembedded therein to authorize access to sensor data, thecomputer-program mechanism including: instructions for receiving thesensor data from a sensor in the environmental monitoring device,wherein the sensor data represents an environmental condition in anexternal environment that includes the environmental monitoring device;instructions for protecting the sensor data; instructions for providingthe protected sensor data to an archive device; instructions forreceiving a request for the sensor data from another electronic device;and instructions for providing authorization information to the archivedevice to release the sensor data to the other electronic device. 10.The computer-program product of claim 9, wherein the authorizationinformation is based on a predefined authorization preference of a userassociated with the environmental monitoring device.
 11. Thecomputer-program product of claim 9, wherein the computer-programmechanism further includes: instructions for requesting user feedbackabout the request; and instructions for receiving the user feedback,wherein the authorization information is provided if the user feedbackincludes approval of the request.
 12. The computer-program product ofclaim 9, wherein protecting the sensor data involves hashing, using asecure hash function, the sensor data, a random number generated by theenvironmental monitoring device and an identifier of the environmentalmonitoring device.
 13. The computer-program product of claim 12, whereinthe secure hash function is one of a set of secure hash functions storedin the environmental monitoring device; wherein the secure hash functionis specified by a protection preference; and wherein thecomputer-program mechanism further includes instructions for receivingthe protection preference from the archive device.
 14. Thecomputer-program product of claim 9, wherein the computer-programmechanism further includes instructions for communicating, to thearchive device, information specifying how to unprotect the sensor data.15. The computer-program product of claim 9, wherein thecomputer-program mechanism further includes instructions forcommunicating, to the other electronic device, information specifyinghow to unprotect the sensor data.
 16. A processor-implemented method forauthorizing access to sensor data, wherein the method comprises:receiving the sensor data from a sensor in the environmental monitoringdevice, wherein the sensor data represents an environmental condition inan external environment that includes the environmental monitoringdevice; using the processor in the environmental monitoring device,protecting the sensor data; providing the protected sensor data to anarchive device; receiving a request for the sensor data from anotherelectronic device; and providing authorization information to thearchive device to release the sensor data to the other electronicdevice.
 17. The method of claim 16, wherein protecting the sensor datainvolves hashing, using a secure hash function, the sensor data, arandom number generated by the environmental monitoring device and anidentifier of the environmental monitoring device.
 18. The method ofclaim 17, wherein the secure hash function is one of a set of securehash functions stored in the environmental monitoring device; whereinthe secure hash function is specified by a protection preference; andwherein the method further comprises receiving the protection preferencefrom the archive device.
 19. The method of claim 16, wherein the methodfurther comprises communicating information specifying how to unprotectthe sensor data to the archive device.
 20. The method of claim 16,wherein the method further comprises communicating informationspecifying how to unprotect the sensor data to the other electronicdevice.